April 3, 2026Democratic institutions and human rights
Data Empowerment & Rights Education in Kazakhstan (DEREK)
Project description

Lead organisation and coordinator: Erkindik Qanaty Public Foundation (Wings of Liberty, WoL)
Implementing co-partner: Public Foundation “Legal Policy Research Centre” (LPRC)
Funding: European Union

The DEREK project aims to strengthen the protection of privacy and personal data in Kazakhstan. It combines training, free legal aid, documentation of violations and dialogue with public authorities to expand civil society participation in shaping digital policy that respects human rights and reflects the needs of different population groups.
LPRC participates as an implementing co-partner and is responsible for coordinating the legal clinic network, supporting regional organisations, operating the Almaty clinic and preparing an analytical report based on practical cases. The Centre also contributes to training, mentoring and advocacy for recommendations to improve personal data protection legislation and practice.
Objectives
1) Strengthen the ability of civil society organisations, legal professionals and local civic initiatives to provide legal aid, identify violations and pursue accountability in privacy and personal data protection.
2) Expand civil society participation in policymaking and public debate on digital rights through case analysis, advocacy for recommendations and public outreach.
Main target groups
1) Civil society organisations, including regional organisations working with women, young people, persons with disabilities, migrants and survivors of violence.
2) Lawyers, advocates, human rights defenders and legal aid providers.
3) Representatives of public authorities, parliament and national human rights institutions.
4) Journalists, editors, bloggers and content creators.
5) Law students and early-career professionals working on digital rights.
The final beneficiaries are residents of Kazakhstan whose data are processed when they use digital platforms and e-government services. Particular attention is given to vulnerable groups, human rights defenders, activists, journalists and people living in areas with limited access to legal aid.
Key project components
Personal Data Protection School. Training in Almaty, involving national and international experts, is planned for at least 40 civil society representatives, legal professionals and human rights defenders. The programme combines legal standards with practical case analysis. Six follow-up workshops are planned to help participants consolidate and apply their knowledge.
Legal clinic network. The project plans to establish six specialised clinics: four hosted by regional organisations in northern, southern, eastern and western Kazakhstan, alongside clinics operated by WoL in Astana and LPRC in Almaty. Regional organisations will be selected through a competitive process and receive financial and expert support. The clinics will provide free consultations, assistance with complaints and legal representation in privacy and personal data protection matters.
Strategic litigation and mentoring. Support is planned for at least seven strategic litigation cases aimed at addressing systemic problems in legislation and its application. Junior lawyers and students will have opportunities to work on practical cases under the guidance of experienced professionals and develop skills in protecting digital rights.
Analysis of practice and recommendations. An analytical report in Kazakh and Russian will draw on the clinics’ work. It will examine recurring violations, problems in the use of personal data and barriers to access to remedies, and offer recommendations for public authorities and civil society.
National Forum on Personal Data Protection. The “Dialogue for Reform: Digital Law Forum on Personal Data Protection” is planned for at least 60 representatives of public authorities, civil society, the legal and academic communities, and the media. Participants will discuss clinic casework, research findings and international experience, and develop recommendations to improve personal data protection.
Awareness-raising campaign and advocacy. Articles, infographics, podcasts, videos and social media publications in Kazakh and Russian will help people better understand their digital rights and how to protect them. Project findings and recommendations will inform dialogue at national and international levels.
Three sets of practical resources are planned in Kazakh and Russian: a guide to safeguarding and managing personal data, templates for legal aid providers, and a model privacy policy for civil society organisations.
The project is planned for three years (36 months) and is implemented with financial support from the European Union.
For more information, please contact info@lprc.kz
This publication was produced with the financial support of the European Union. Its contents are the sole responsibility of the Public Foundation “Legal Policy Research Centre” (LPRC) and do not necessarily reflect the views of the European Union.

