Kazakhstan approves new digital signature verification rules effective September 6
This digest was compiled by AI from multiple sources — links to the originals are below.
Kazakhstan's Ministry of Artificial Intelligence and Digital Development approved new rules for verifying electronic digital signatures on August 21, 2026. The rules take effect September 6, 2026, replacing previous procedures. A single failed check will invalidate the signature.
Key Facts
- The order was signed on August 21, 2026, by the Deputy Prime Minister and Minister of Artificial Intelligence and Digital Development.
- The new rules take effect on September 6, 2026, replacing the previous rules.
- A negative result in any single verification step means the digital signature fails authentication.
- Verification requires the electronic document or its hash, the digital signature, the signer's certificate, and certification authority certificates in the chain.
- If a valid timestamp token is present, verification is performed as of the time indicated in the token; otherwise, as of the time of verification.
Verification Requirements
The rules specify the data required to verify a digital signature in an electronic document. Required data include the electronic document or its hash, the digital signature itself, the signer's certificate, and certification authority certificates forming the chain up to a trusted root certificate. A timestamp token, OCSP response, or certificate revocation list may be used if available. The verification process includes cryptographic verification of the signature, verification of the signer's certificate, and verification of the timestamp token when present.
Verification Outcome
A negative result in any of the prescribed checks means the digital signature has not passed authentication. If the verification result is positive and all conditions are met, the electronic document is recognized as equivalent to a paper document signed by hand and has the same legal consequences. A negative result in checking the authority of a person signing on behalf of a legal entity does not by itself affect the authentication result of the digital signature. The legal consequences of lacking the necessary authority are determined by Kazakhstan's legislation.
4 sources
Kazakhstan approves new digital signature verification rules effective September 6
