DP Regulations 2025: section 9-2 'Right to withdraw consent' is listed and cited twice but has no text

Section 9-1(5) twice refers to section 9-2: the right to withdraw consent "afforded ... under section 9-2" and the duty to inform the Data Subject "how to exercise it as set out in section 9-2". The contents list "9-2. Right to withdraw consent", but the text passes from section 9-1(12) directly to section 10. Section 9-1(5) itself says that consent may be withdrawn at any time, that withdrawing must be at least as easy as giving consent and that it does not affect earlier processing; section 9-1(9) requires procedures for recording withdrawal. The amending instrument of 1 April 2025 is not on the act page, so it cannot be established whether the instrument or the consolidation lost section 9-2.

Proposed correction

Please publish section 9-2 if it was adopted, or reconcile the references in section 9-1(5) while keeping the existing withdrawal rights and information duties.

Jurisdiction

Kazakhstan — AIFC

Act

AIFC Data Protection Regulations

Place

contents

Record

Discrepancy

Class

Text of the act

Where it arose

Not established

Arxo's conclusion

Confirmed

Official text

Unchanged at last check

Last checked

2026-10-24

Evidence

Contradiction within the text. Quotations are verbatim from the official material; translations are ours and marked.

Right to withdraw consent

A Data Subject may withdraw consent at any time in accordance with the right afforded to Data Subjects under section 9-2.

A Data Subject must be informed of this right and how to exercise it as set out in section 9-2 at the time consent is obtained.

(WITH AMENDMENTS AS OF APRIL 1, 2025)

must be at least as easy as the process of giving consent

appropriate methods and procedures are in place to manage the recording of consent and the withdrawal of consent

How to check it without Arxo's tools

1. Open AIFC DATA PROTECTION REGULATIONS (with amendments as of 1 April 2025) and find contents; s.9-1(5); title page; DP Regulations 2025, s.9-1(5) (third sentence); DP Regulations 2025, s.9-1(9). Compare the text with the quotation above. A copy is kept in this register: d1a6312a3161802b-aifc-data-protection-regulations-2025-1.pdf (SHA-256 d1a6312a3161802bcd4f252058143c087a07fd8cd3c57f8d3cc9c968f1e5a022, copy of the official file).
2. The finding holds if the quoted passages read as shown and the comparison gives the result stated at the top of this page. If it does not, write to us with the record ID.

How this finding was made

AI agents read the official texts, turned the provisions concerned into executable rules and ran the comparison; they also drafted this record. A person at Arxo checked the finding and approved the report before it was sent (2026-10-27).

Responsible institutions

• AIFC Authority — body that prepares AIFC acts and publishes them on the AIFC website

Reported to

Responses

No response recorded.

Documents and reproduction

• AIFC DATA PROTECTION REGULATIONS (with amendments as of 1 April 2025)

History

1. 2026-10-24Confirmed by Arxo
2. 2026-10-27Entered in the register
3. 2026-10-27Reported to AIFC Authority (e-mail)

Cite this record

Arxo Law, Arxo Findings Register, ARXO-2026-0201, https://arxo.io/findings/ARXO-2026-0201/ (status as of 2026-10-24). Data: ARXO-2026-0201.json.