Kyrgyzstan expands state secrets authority to include personal data agency

The Kyrgyz government has broadened the authority of its state bodies concerning classified information. A recent resolution by the Cabinet of Ministers has added the State Agency for Personal Data Protection to the list of organizations empowered to designate information as state secrets.

This expansion not only includes the agency in the classification process but also broadens the scope of sensitive information it is authorized to handle. Notably, this now encompasses data related to personal data protection systems used for processing state secrets, including cryptographic security measures. The State Committee for National Security (GKNB) will share these responsibilities with the Personal Data Protection Agency in this specific area.

The amendments also incorporate the State Agency for Personal Data Protection into the authorized bodies for several other existing categories of secret information. The specific details of these categories are not disclosed in the provided text, as the changes involve adding the agency to current lists of responsible entities.

These modifications update a previous resolution from April 26, 2024, which established the initial lists of bodies with state secret authority and the critical information constituting state secrets. Officials in the cabinet stated that the changes are intended to bolster the security and protection of state secrets within Kyrgyzstan. The resolution is set to come into force seven days after its official publication.