Awe CheckConsent to data processing in website forms: Kazakh law
How to set up consent in a lead form under Kazakh law: checkbox, wording, policy link and what to store on the server. With ready code.
Checked against sources: 1 October 2026
- 1 checkboxnever pre-ticked
- 865,000 ₸up to, large business
- 3 fieldsdate, page, version
When consent is needed
Article 8 of the Law on Personal Data: collecting and processing personal data requires the person’s consent. A form asking for a name, phone or email is collection.
What it should look like
- A separate checkbox next to the submit button, not pre-ticked.
- A short text: who collects the data, why, and a link to the privacy policy.
- The form does not submit until the box is ticked.
- A separate box for newsletters: consent to a request and to marketing are different consents.
What to store on the server
The date and time of consent, the page address and the consent text version. If someone complains, this is your only proof they agreed.
Ready code
<label class="consent"> <input type="checkbox" name="consent" required> I agree to the processing of my personal data under the <a href="/privacy">privacy policy</a> </label>
Fine
Collecting data without consent is Article 79(1) of the Administrative Code: 60–200 MCI, i.e. 259,500–865,000 ₸ in 2026.
Frequently asked
Is “By clicking the button you agree…” enough?
It is weaker than a checkbox: the person takes no separate action. Many use it for simple contact forms, but in a dispute a checkbox with a stored date is safer.
Can the box be pre-ticked?
No. Pre-ticked consent is not expressed consent, the person did not give it. Awe Check flags such forms as a violation.
