Changes to EDS rules in Kazakhstan: what managers and companies need to know

Changes to EDS rules in Kazakhstan: what managers and companies need to know Starting September 11, new rules for issuing, storing, and revoking electronic digital signature (EDS) certificates came into force in Kazakhstan. The changes are aimed at enhancing security and streamlining work with digital documents in accordance with the Digital Code. The main innovation for businesses is that company managers no longer need to transfer their personal EDS key to accountants, lawyers, or HR specialists. Authority can now be officially delegated. Key rules for working under the new system 1. Prohibition on key transfer: Transferring EDS keys, their passwords, and SMS codes to unauthorized employees is strictly prohibited. Each specialist must work under their own account. 2. How delegation works: A manager can appoint an authorized employee in the personal account of the National Certification Authority (NCA), who will confirm and reject EDS applications, as well as revoke certificates. To do this, the employee must have their own EDS based on the "Employee with Signing Authority" template. 3. Limitations of authority: Delegation applies exclusively to obtaining and revoking employee certificates. It does not grant the employee the right to sign contracts, financial statements, and other official documents on behalf of the director. 4. Login confirmation: The SMS code for confirming operations is sent to the authorized employee's number registered in the Mobile Citizens Database. Instead of SMS, a verification code from the eGov Mobile app or a mobile banking application can also be used. What companies need to do Organizations need to verify who is actually handling EDS applications. If these functions are not performed by the director, official delegation must be arranged through the NCA personal account before the specified deadline. The rules were approved by Order No. 522/НК dated August 28, 2026, with the full text of the document published in the "Әділет" information system. Configure your company's processes in accordance with security requirements and operate under the new rules.