Electronic interaction and the electronic insurance contract

Unofficial English summary prepared for informational purposes. Official source: Әділет / adilet.zan.kz. Version checked: 2026-06-20. This is a reference card; in case of discrepancies, the official Kazakh and Russian texts prevail.

Metadata


Act number	№ 50
Act type	Regulator's resolution
Authority	ARDFM (financial-market regulator)
Adoption date	27.04.2020
Last amended	15.11.2023
Status	In force
Әділет identifier	V2000020514

Scope and relevance

The ARDFM resolution implements Article 15-2 of Law No. 126-II on the electronic insurance contract: the exchange of electronic resources between the database, the insurer and the policyholder, notifications, and requirements for insurers' internet resources (online conclusion of contracts).

Official source

Official source: Adilet / https://adilet.zan.kz/rus/docs/V2000020514 The relevance of the editorial office has been verified: 2026-06-20.

Footnote: Footnote. The title is as amended by the resolution of the Board of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market dated November 15, 2023 No. 84 (to come into effect from January 1, 2024).

In accordance with paragraphs 3 and 4 of Article 15-2, subparagraph 24) of Article 43 of the Law of the Republic of Kazakhstan “On Insurance Activities”, the Board of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market DECIDES:

Approve:

Rules for the exchange of electronic information resources between the organization for the formation and maintenance of the database and the insurer, insurer and policyholder (insured, beneficiary) in accordance with Appendix 1 to this resolution;

2) Rules for sending by the organization for the formation and maintenance of the database a notification about the conclusion of an insurance contract and the settlement of insured events in accordance with Appendix 2 to this resolution;

3) Requirements for software and hardware and Internet resources of an insurance (reinsurance) organization, a branch of a non-resident insurance (reinsurance) organization of the Republic of Kazakhstan, ensuring the conclusion of insurance contracts, the exchange of electronic information resources between the policyholder and the insurer in accordance with Appendix 3 to this resolution.

2. To recognize as invalid:

Resolution of the Board of the National Bank of the Republic of Kazakhstan dated October 29, 2018 No. 268 “On approval of the Rules for the exchange of electronic information resources between the policyholder (insured, beneficiary) and the insurer, the Rules for notification of the conclusion of an insurance contract and requirements for the content of the notification, Requirements for software and hardware and Internet resources of an insurance (reinsurance) organization that ensures the conclusion of insurance contracts, exchange of electronic information resources between the policyholder and the insurer" (registered in the Register of State Registration of Regulatory Legal Acts under No. 17824, published on December 12, 2018 in the Reference Control Bank of Regulatory Legal Acts of the Republic of Kazakhstan);

2) Resolution of the Board of the National Bank of the Republic of Kazakhstan dated January 31, 2019 No. 16 “On amending the Resolution of the Board of the National Bank of the Republic of Kazakhstan dated October 29, 2018 No. 268 “On approval of the Rules for the exchange of electronic information resources between the policyholder (insured, beneficiary) and the insurer, Rules for notification of the conclusion of an insurance contract and requirements for the content of the notification, Requirements for software and hardware funds and Internet resources of the insurance (reinsurance) organization, ensuring the conclusion of insurance contracts, the exchange of electronic information resources between the policyholder and the insurer" (registered in the Register of State Registration of Regulatory Legal Acts under No. 18311, published on March 11, 2019 in the Reference Control Bank of Regulatory Legal Acts of the Republic of Kazakhstan).

3. The Department of the Insurance Market and Actuarial Calculations, in accordance with the procedure established by the legislation of the Republic of Kazakhstan, shall ensure:

jointly with the Legal Department, state registration of this resolution with the Ministry of Justice of the Republic of Kazakhstan;

2) placement of this resolution on the official Internet resource of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market after its official publication;

3) within ten working days after the state registration of this resolution, submission to the Legal Department of information on the implementation of the measures provided for in subparagraph 2) of this paragraph and paragraph 4 of this resolution.

4. The Department of International Relations and External Communications must ensure that, within ten calendar days after the state registration of this resolution, its copy is sent for official publication in periodicals.

5. Control over the implementation of this resolution shall be entrusted to the Deputy Chairman of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market, Khadzhieva M.Zh.

6. This resolution comes into force twenty-one calendar days after the day of its first official publication.

Chairman of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market M. Abylkasymova

Appendix 1 to the Resolution of the Board of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market dated April 27, 2020 No. 50

Rules for the exchange of electronic information resources between the organization for the formation and maintenance of the database and the insurer, insurer and policyholder (insured, beneficiary)

Footnote: Footnote. Appendix 1 - as amended by the resolution of the Board of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market dated November 15, 2023 No. 84 (to come into effect from January 1, 2024).

These Rules for the exchange of electronic information resources between the organization for the formation and maintenance of the database and the insurer, the insurer and the policyholder (the insured, the beneficiary) (hereinafter referred to as the Rules) are developed in accordance with the Law of the Republic of Kazakhstan “On Insurance Activities” (hereinafter referred to as the Law on Insurance Activities) and determine the procedure for the exchange of electronic information resources between the organization for the formation and maintenance of the database and the insurer, the insurer and the insured (insured, beneficiary).

2. The concepts and terms used in the Rules are used in the meanings specified in the Law on Insurance Activities, the laws of the Republic of Kazakhstan “On Electronic Documents and Electronic Digital Signatures” and “On Informatization”.

For the purposes of the Rules, the following concepts are also used:

partner’s Internet resource - the Internet resource of other organizations that are partners of the insurer on the basis of a relevant agreement;

2) marketplace (digital platform) – a digital platform of the insurer and/or its partner intended for concluding insurance contracts and (or) settling insurance claims.

3) mobile application - a software product used on a subscriber’s cellular device and providing access to services provided in electronic form via cellular communications and the Internet, with the exception of browsers used to view, process and display the content of Internet resources;

4) insurer - an insurance organization, a branch of a non-resident insurance (reinsurance) organization of the Republic of Kazakhstan, carrying out activities for the conclusion and execution of insurance contracts on the basis of the relevant license of the authorized body;

5) electronic terminal - an electronic-mechanical device intended for making payments and (or) money transfers or operations for receiving and (or) issuing cash, or for carrying out exchange transactions with foreign currency, or for carrying out other types of transactions, as well as generating relevant supporting documents.

3. The exchange of electronic information resources on compulsory and mandatory insurance in electronic form is carried out exclusively using the insurer’s Internet resource.

The exchange of electronic information resources on voluntary insurance in electronic form is carried out using the insurer’s Internet resource and the partner’s Internet resource.

The exchange of electronic information resources through the partner’s Internet resource is carried out solely for the purpose of concluding insurance contracts and (or) settling insurance claims in electronic form.

It is allowed to use mobile applications, electronic terminals, marketplaces that exclusively provide input of data necessary for concluding insurance contracts and (or) settling insurance claims in electronic form by exchanging electronic information resources, and sending them to an Internet resource and (or) to the insurer’s information system.

When concluding insurance contracts and (or) settling insurance cases under compulsory and imputed insurance in electronic form through the exchange of electronic information resources, the use of mobile applications, electronic terminals, marketplaces that do not belong to the insurer is not allowed, except in cases where the mobile application or electronic terminal or marketplace belongs to a bank, payment organization or organization that guarantees insurance payments to policyholders (insured, beneficiaries) in the event of liquidation insurance organizations, and provided that they are used for direct access to the insurer’s Internet resource and are solely a means for entering information necessary for concluding an insurance contract and (or) settling insured events on the insurer’s Internet resource.

When using a mobile application, electronic terminal, or marketplace for direct access to the insurer’s Internet resource:

the policyholder's access to the insurer's Internet resource through a mobile application, electronic terminal or marketplace is carried out by using the domain name of the insurer's Internet resource on the Internet;

the insurer ensures the protection and safety of personal data and insurance secrets, as well as the inability of third parties, including the owner of a mobile application, electronic terminal or marketplace, to access information transmitted to the insurer’s Internet resource through these devices;

the insurer ensures termination of interaction with the owner of the mobile application, electronic terminal or marketplace in the event of non-compliance with the requirements of the Rules without the possibility of further exchange of electronic information resources and the conclusion of insurance contracts and (or) settlement of insurance cases in electronic form using the mobile application, electronic terminal or marketplace belonging to this owner.

It is not allowed for the policyholder or insurer to pay a commission (remuneration) to the owner of an electronic terminal, mobile application or marketplace when drawing up (concluding) insurance contracts for compulsory and imputed insurance, with the exception of the commission for making payments using an electronic terminal, mobile application or marketplace owned by a bank, payment organization or organization guaranteeing insurance payments to policyholders (insured, beneficiaries) in the event of liquidation of insurance organizations.

4. The requirement of part five of paragraph 3 of the Rules does not apply when concluding insurance contracts and (or) settling insured events with persons temporarily entering the territory of the Republic of Kazakhstan at checkpoints across the State Border of the Republic of Kazakhstan, subject to their consent to the transfer of personal data.

5. By agreement between the insured (tour operator in the field of outbound tourism) and the insurer, it is allowed to transfer information necessary for concluding a compulsory tourist insurance contract and (or) settling insured events under it, through the integration of the insured’s information system, intended for the formation and sale of a tourism product, and the insurer’s Internet resource.

It is not allowed for the insurer to pay the policyholder remuneration for work or services related to the conclusion of compulsory tourist insurance contracts and (or) the settlement of insured events under them and the provision or modification of the policyholder’s information system, including through third parties.

6. The exchange of electronic information resources between the policyholder (insured, beneficiary) and the insurer is carried out provided that the insurer provides:

unhindered round-the-clock access to the Internet resource;

2) placement on the Internet resource of insurance rules (standard insurance conditions) by type (class) of insurance;

3) the possibility of creating a personal page for the policyholder on an Internet resource (hereinafter referred to as the policyholder’s personal account);

4) identification and authentication of the policyholder in ways that comply with the requirements of the legislation of the Republic of Kazakhstan on informatization;

5) automated verification of the fields filled in by the insured (beneficiary, victim) in the application for concluding an insurance contract and (or) for the settlement of insured events (hereinafter referred to as the application), drawn up in any form, for their compliance with the minimum and maximum number and format of letters, numbers or symbols required to form the application.

If the contents of the fields in the application do not correspond, the policyholder is notified of the need to check and correct the inappropriate fields in the application;

6) automated verification of the subscriber number specified by the policyholder (insured, beneficiary), provided by the cellular operator (hereinafter referred to as the subscriber number), with data from state databases.

If there is no data on the specified subscriber number in the state database or technical inaccessibility of the state database, verification of the subscriber number is carried out by sending an SMS message indicating a one-time password to the subscriber number specified by the policyholder (insured, beneficiary) to confirm this number, except for cases of concluding an insurance contract and (or) settling insured events by logging into the personal account of the policyholder (insured, beneficiary).

The requirements of this subclause apply to insurance contracts for compulsory and imputed insurance, concluded and (or) settled insured events in electronic form;

7) obtaining the consent of the recipient of insurance services (policyholder, insured, beneficiary) to collect and process personal data, to transfer and receive data to/from the Unified Insurance Database (hereinafter referred to as the UIDB) in order to obtain information from state databases necessary to receive insurance services in electronic form.

In this case, the policyholder is responsible for obtaining the consents of the insured persons and/or beneficiaries for the collection and processing of personal data, for the transfer and receipt of data to/from the Unified Database for the purpose of obtaining information from state databases, when transferring this data to the insurer for concluding an insurance contract;

8) when concluding an insurance contract and (or) settling insured events, automatic sending of the information specified in the application, including information on the availability of benefits established by paragraph 1 of Article 20 of the Law of the Republic of Kazakhstan “On compulsory insurance of civil liability of vehicle owners” (hereinafter referred to as the benefit for compulsory civil liability insurance of vehicle owners), to the Unified Database Database for automated reconciliation and (or) automatic filling of application fields with data from information systems of state bodies and their subordinate organizations, integrated with the ESBD information system (hereinafter referred to as state databases).

If the data necessary for concluding an insurance contract and (or) settling insurance claims is not available in state databases or is technically inaccessible to state databases, the information specified in the application is verified with data on previously concluded insurance contracts (insured) and current insurance contracts, declared and settled insurance claims contained in the Unified Database Database.

If the Unified Database Database does not contain data on previously concluded by the policyholder (insured) and current insurance contracts, declared and settled insured events, the insurer carries out a reconciliation with information from electronic or scanned copies of documents attached to the application;

9) automated verification of the information specified by the policyholder in the application with data from state databases and the Unified Database Database:

through a secure communication channel that provides two-way authentication, encryption and data confidentiality;

in the mode of verifying the data specified by the policyholder in the application on the insurer’s Internet resource;

the insurer is not allowed to transfer information located in state databases and the Unified Database Database to the insurer’s Internet resource, as well as automatically fill in the application fields and return to the insurer’s Internet resource data on the policyholder (insured), containing insurance secrets or other secrets protected by law, including personal data in the absence of the appropriate consent of the policyholder to collect and process personal data, to provide data to the Unified Database Database;

10) receiving from the Unified Database Database information on the compliance or non-compliance of the information specified in the application with data from state databases or the Unified Database Database, indicating the inappropriate fields.

If there is a discrepancy between data from state databases or the Unified Database Database and information from electronic or scanned copies of documents attached to the application, the insurer enters into an insurance contract and (or) settles insured events based on information from electronic or scanned copies of documents while simultaneously notifying the policyholder of the identified discrepancy and the need to correct the data located in state databases or in documents issued to the policyholder (insured).

If information is received from the Unified Database Database about a discrepancy between the information specified in the application and data from state databases or the Unified Database Database, the insurer is notified on the insurer's Internet resource of the need to check and correct the inappropriate information specified in the application;

11) sending information on the concluded insurance contract to the Unified Database and registration of the insurance contract in the Unified Database and assigning it a unique number;

12) sending information on the settlement of an insured event to the Unified Database and registration of the insured event in the Unified Database and assigned it a unique number containing the unique number of the insurance contract;

13) immediate sending to the policyholder of a notice of the conclusion of an insurance contract indicating the unique number of the insurance contract assigned by the ESBD and the information specified in paragraphs 6 and 9 of the Rules for sending by the organization for the formation and maintenance of a database a notice of the conclusion of an insurance contract and the settlement of insured events approved by this resolution;

14) immediate sending to the policyholder (insured) and (or) the injured (beneficiary) a notification at each stage of the settlement of the insured event, indicating the unique number of the insured event assigned by the ESBD and the information specified in paragraphs 6 and 9 of the Rules for sending the organization for the formation and maintenance of the database notification of the conclusion of the insurance contract and the settlement of insured events approved by this resolution:

on registration of an insured event;

on refusal to accept documents for settlement (indicating the reasons for the refusal);

about the insufficiency of documents confirming the fact of the occurrence of an insured event and the amount of damage to be compensated by the insurer;

about refusal to make insurance payment.

7. Information about the insurance contract contains, among other things, information about settled and unresolved insurance cases.

8. When concluding an insurance contract in electronic form, the insurer on the Internet resource provides the policyholder with the opportunity to:

forming an application that contains:

for an individual:

last name, first name and patronymic (if any);

individual identification number (if available);

legal address and (or) place of residence (at the discretion of the insurer);

date of issue, identification document number;

sign of residence (resident or non-resident of the Republic of Kazakhstan);

email address (if available);

subscriber number;

a note on the availability of benefits for compulsory civil liability insurance of vehicle owners;

an indication of the insured (beneficiary), if he is not the policyholder under the insurance contract;

other information necessary for concluding an insurance contract in accordance with the legislation of the Republic of Kazakhstan on insurance and insurance activities;

for a legal entity:

full name;

business identification number (if available);

location (at the discretion of the insurer);

economic sector code, type of economic activity;

information about the beneficial owners or the main manager;

information about the number and date of issue of the license (for insurance of licensed types of activities);

email address (if available);

subscriber number;

an indication of the insured (beneficiary), if he is not the policyholder under the insurance contract;

other information necessary for concluding an insurance contract in accordance with the legislation of the Republic of Kazakhstan on insurance and insurance activities.

The application of the insured (tour operator in the field of outbound tourism), in addition to the information specified in this paragraph, contains the subscriber number of the insured (tourist traveling abroad);

2) attaching electronic or scanned copies of documents confirming the information specified by the policyholder in the application;

3) familiarization with the amount of the insurance premium, as well as the amount of the insurance premium taking into account the discounts and benefits provided for compulsory civil liability insurance of vehicle owners (if any);

4) familiarization with the insurance rules (standard insurance conditions) for the insurance product chosen by the policyholder before paying the insurance premium;

5) payment of the insurance premium, including through the insurer issuing an invoice for payment containing the insurer’s payment details, account number, payment deadline and procedure for the entry into force of the insurance contract.

In the event of failure to pay the insurance premium within the period required by the insurer, the insurer ensures that a notification is sent to the policyholder about the non-conclusion of the insurance contract.

In case of payment of an insurance premium in an amount less than that provided for in the insurance contract, the insurer immediately sends a notice to the policyholder of the need to pay the missing part of the insurance premium within the period specified by the insurer.

In case of payment of an excess amount of the insurance premium, the insurer ensures its return to the policyholder and sends a corresponding notification;

6) choosing a method for notifying the insurer and the unified insurance policy of the policyholder about the conclusion of an insurance contract in accordance with the Rules for notification of the conclusion of an insurance contract and the requirements for the content of the notification approved by this resolution;

7) creating a personal account containing information on all previously concluded and (or) current insurance contracts in electronic form in relation to each policyholder (insured).

9. When settling an insured event in electronic form, the insurer on the Internet resource provides the policyholder (the insured, the victim, the beneficiary) with the opportunity to fill out forms and provide the following information, including for the formation of an insurance case:

for an individual:

last name, first name and patronymic (if any);

individual identification number (if available);

legal address and (or) place of residence (at the discretion of the insurer);

date of issue, identification document number;

sign of residence (resident or non-resident of the Republic of Kazakhstan);

email address (if available);

subscriber number;

the status of the person (policyholder, insured, participant in the insured event, representative and others);

other information necessary to resolve the insured event in accordance with the legislation of the Republic of Kazakhstan on insurance and insurance activities;

for a legal entity:

full name;

business identification number (if available);

location (at the discretion of the insurer);

economic sector code, type of economic activity;

information about the beneficial owners or the main manager;

information about the number and date of issue of the license (for insurance of licensed types of activities);

email address (if available);

subscriber number;

the status of the person (policyholder, insured, participant in the insured event, representative and others);

other information necessary to resolve the insured event in accordance with the legislation of the Republic of Kazakhstan on insurance and insurance activities.

2) indication of information about damage to property and/or life and health;

3) attaching electronic or scanned copies of documents confirming the information specified by the insured (beneficiary, victim) necessary for making an insurance payment in accordance with the legislation of the Republic of Kazakhstan on insurance and insurance activities, with the exception of documents and information available in electronic form in databases and (or) information systems of state bodies, access to which is provided to the insurer by the organization for the formation and maintenance of the database;

4) familiarization with the amount of the assessment of the amount of harm (report on the amount of harm), marking its approval or non-approval, as well as the amount to be paid;

5) providing information about the payment details of the beneficiary for the insurer to make an insurance payment;

6) choosing a method for notifying the insurer (beneficiary, victim) of the insurer (beneficiary, victim) about the main stages of the process of settling the insured event, including refusal to accept documents for settlement and (or) insurance payment in accordance with the Rules for notification of the conclusion of an insurance contract, settlement of insured events and requirements for the content of the notification approved by this resolution;

7) creating a personal account containing information on all reported and settled insurance cases, in electronic form, in relation to each policyholder (insured, beneficiary, victim), depending on the right of access provided for by the legislation of the Republic of Kazakhstan on insurance and insurance activities;

8) sending the insurer a notice of the intention to contact the insurance ombudsman and informing about the procedure for contacting the insurance ombudsman to resolve the dispute and going to the insurance ombudsman’s website;

9) sending an application to the insurance ombudsman to resolve disputes arising from the insurance contract.

10. The requirements of paragraphs 6, 8 and 9 of the Rules apply to contracts:

compulsory tourist insurance;

compulsory environmental insurance;

imputed and voluntary insurance, exchange of electronic information resources, conclusion of insurance contracts and (or) settlement of insured events for which is carried out using the insurer’s Internet resource;

compulsory civil liability insurance:

private notaries;

audit organizations;

carriers in front of passengers;

vehicle owners;

owners of facilities whose activities involve the risk of causing harm to third parties.

In case of concluding insurance contracts and (or) settling insured events using the partner’s Internet resource, the insurer ensures compliance with the requirements of paragraphs 6, 8 and 9 of the Rules, with the exception of subparagraphs 1), 3), 8) and 10) of paragraph 6, subparagraph 7) of paragraph 8 of the Rules.

In the case of concluding insurance contracts using information from state databases, the insurer ensures compliance with paragraphs 6 and 8, with the exception of subparagraphs 5) and 8) of paragraph 6, subparagraph 2) of paragraph 8 of the Rules.

At the discretion of the insurer, the partner's Internet resource is provided with access to the insurer's information systems to carry out an automated verification of the information specified by the policyholder in the application on the partner's Internet resource with data from government databases and the Unified Database Database.

When performing an automated reconciliation of the information specified by the policyholder in the application with data from government databases and the Unified Database System using the partner’s Internet resource:

automated reconciliation is carried out through the interaction of the partner’s Internet resource with the insurer’s information system through a secure communication channel that provides two-way authentication, encryption and data confidentiality. It is not allowed for the insurer to transfer accounts and (or) access keys to the Unified Database Data System to the partner’s Internet resource and to provide access to part of the insurer’s information systems intended for concluding insurance contracts and (or) settling insurance cases in electronic form through information interaction between the policyholder and the insurer;

automated reconciliation is carried out only in the verification mode of the data specified by the policyholder in the application on the partner’s Internet resource. The insurer transmits to the partner’s Internet resource only the result of data verification in the “true” or “false” format;

The insurer is not allowed to transfer information located in state databases and the Unified Database System to the partner’s Internet resource, as well as automatically fill out fields and return data on the policyholder (insured), including his personal data, to the partner’s Internet resource.

If the policyholder does not consent to the collection and processing of personal data when using the partner’s Internet resource, an automated reconciliation of the information specified by the policyholder in the application with data from state databases and the Unified Database Database is carried out, the requirements of the second and third paragraphs of part five of this paragraph are met.

11. It is not allowed to include additional paid products and services that are not provided for by certain legislative acts of the Republic of Kazakhstan regulating compulsory types of insurance when concluding a compulsory insurance contract on the insurer’s Internet resource without obtaining the consent of the policyholder.

Automatic marking of the policyholder's familiarization with the terms and conditions of insurance, or the receipt of the policyholder's consent to purchase paid products and services on the insurer's Internet resource or partner's Internet resource is not allowed.

12. In the case of concluding an insurance contract in the manner prescribed by subparagraph 1) of paragraph 1 of Article 825 of the Civil Code of the Republic of Kazakhstan (Special Part), the insurance contract is subject to conclusion using electronic digital signatures of the parties to the contract, taking into account the requirements for electronic digital signatures established by the Law of the Republic of Kazakhstan “On Electronic Documents and Electronic Digital Signatures”.

13. In the case provided for by part three of subparagraph 8) of paragraph 6 of the Rules, the insurer, no later than the next business day from the date of uploading by the insured (insured, victim, beneficiary) of electronic or scanned copies of documents to the insurer’s Internet resource or partner’s Internet resource, ensures the sending of a notification:

about the need to pay an insurance premium;

2) about the impossibility of concluding an insurance contract and the need to correct the information specified in the application for insurance;

3) the need to re-upload documents within the period specified by the insurer;

4) on registration of an insured event;

5) refusal to accept documents for settlement (indicating the reasons for the refusal);

6) about the impossibility of accepting documents to resolve the insured event and the need to correct the information specified in the application of the insured (insured, victim, beneficiary);

7) the need to re-upload documents within the period specified by the insurer;

8) about the amount of insurance payment.

A notification about the impossibility of concluding an insurance contract or registering an insured event, accepting documents for settling an insured event and the need to correct information is sent in the event of a discrepancy between the information specified in the application of the insured (insured, victim, beneficiary) with the data of the documents provided by the insured (insured victim, beneficiary).

Notification of the need to re-upload documents within the period specified by the insurer is sent if it is impossible to compare the information specified in the application of the policyholder (insured, victim, beneficiary) with the data of the documents provided by the policyholder (insured, victim, beneficiary).

14. Access to information under the insurance contract and (or) on insured events is provided by the insurer at the choice of the identified person applying for information in one of the following ways:

by entering on the insurer’s Internet resource the subscriber number of the policyholder (insured, victim, beneficiary) and (or) the unique number of the insurance contract and (or) the unique number of the insured event and data at the discretion of the insurer (for individuals and legal entities);

2) by telephone in the manner and taking into account the requirements provided for in paragraph 17 of the Rules (for individuals).

At the discretion of the insurer, access of the policyholder (insured, victim, beneficiary) to information on the concluded insurance contract and (or) insured events can also be provided in the event of its identification and authentication using the electronic digital signature of the policyholder (insured, victim, beneficiary).

The actions specified in subparagraph 6) of paragraph 4 of Article 15-2 of the Law on Insurance Activities are performed by the insured (insured, injured, beneficiary) through access to the personal account of the insured (insured, injured, beneficiary) or access to information on the concluded insurance contract and (or) insured events provided in accordance with subparagraph 1) of part one of this paragraph.

15. Upon receipt of an application for changing information, re-issuing an insurance contract and (or) changing information for the settlement of insured events, the insurer checks and verifies the information contained in the application in accordance with subparagraphs 8) and 10) of paragraph 6 of the Rules.

16. Upon receipt of an application for early termination of the insurance contract, the insurer informs the policyholder about the procedure for early termination of the insurance contract.

17. Access to information about the insurance contract, about the insured event is provided by the insurer via telephone, subject to the identification of the person applying for information based on verification of his last name, first name, patronymic (if any), identification document number, individual identification number, unique number of the insurance contract and (or) unique number of the insured event and other data at the discretion of the insurer.

18. Electronic or electronic copies of documents attached to the application for the occurrence of an insured event, determining the amount of damage, sending a statement of disagreement with the calculation, making an insurance payment are sent by the policyholder (the insured, the victim, the beneficiary) to the insurer by uploading them through the insurer’s Internet resource or the partner’s Internet resource or to the personal account of the policyholder (the insured, the victim, the beneficiary).

The documents provided for in part one of this paragraph are not submitted if they are available (the information specified in them is available) in electronic form in databases and (or) information systems of state bodies, access to which is provided to the insurer from state databases and the organization for the formation and maintenance of the database.

19. The insurer, when receiving information about cases of harm to the life of the victim as a result of a transport accident, including from the organization for the formation and maintenance of the database provided for in paragraph 5 of Article 9 of the Law of the Republic of Kazakhstan “On compulsory insurance of civil liability of vehicle owners” (hereinafter referred to as the Law), collects information and documents provided for in paragraph 2 of Article 25 of the Law, on the beneficiary (beneficiaries) by exchanging electronic information resources the insurer and the organization for the formation and maintenance of the database.

The insurer, no later than 3 (three) working days after identifying the beneficiary (beneficiaries), notifies him (them) of the right to receive insurance payment and the need to submit an application for insurance payment indicating bank details by sending written (including via email, SMS, postal letters) notifications.

Insurance payment is made within fifteen working days from the date the insurer collects the documents provided for in paragraph 2 of Article 25 of the Law and receives an application for insurance payment from the beneficiary (beneficiaries) indicating bank details.

The documents provided for in paragraph 2 of Article 25 of the Law are not submitted by the beneficiary (beneficiaries) if they are available (the information specified in them is available) in electronic form in databases and (or) information systems of state bodies, access to which is provided to the insurer by the organization for the formation and maintenance of the database.

20. If there are insufficient documents confirming the occurrence of an insured event and the amount of damage to be compensated by the insurer, the insurer, within 3 (three) business days from the date of receipt, notifies about this indicating a complete list of missing and (or) incorrectly executed documents by sending a notification in the form of an electronic message to the email address (if available) and (or) in the form of an SMS message to the specified subscriber number.

21. An electronic certificate indicating the full list of documents submitted and the date of their acceptance is sent to the applicant to the email address he specified (if available) and (or) is displayed in the policyholder’s personal account on the insurer’s Internet resource.

Appendix 2 to the Resolution of the Board of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market dated April 27, 2020 No. 50

Rules for sending an organization for the formation and maintenance of a database notification of the conclusion of an insurance contract and the settlement of insured events

Footnote: Footnote. Appendix 2 - as amended by the resolution of the Board of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market dated November 15, 2023 No. 84 (to come into effect from January 1, 2024).

These Rules for sending by an organization for the formation and maintenance of a database a notice of the conclusion of an insurance contract and the settlement of insured events (hereinafter referred to as the Notification Rules) are developed in accordance with the Law of the Republic of Kazakhstan “On Insurance Activities” and determine the procedure for notification of the conclusion of an insurance contract and the settlement of insured events, and the requirements for the content of the notification.

2. When concluding an insurance contract and settling insured events in electronic form, the insurance organization, a branch of a non-resident insurance (reinsurance) organization of the Republic of Kazakhstan (hereinafter referred to as the insurer) and the Unified Insurance Database (hereinafter referred to as the Unified Insurance Database) ensure that a notification is sent to the insured (insured under compulsory tourist insurance, the victim, the beneficiary) about the conclusion of the insurance contract and the settlement of insured events.

3. Notification of the insurer about the conclusion of an insurance contract and (or) the main stages of the process of settling an insured event, including the refusal to accept documents for settlement (indicating the reasons for the refusal), on the insurer’s Internet resource and (or) the Internet resource of other organizations that are partners of the insurer on the basis of the relevant agreement (hereinafter referred to as the partner’s Internet resource) is sent to the insured (insured under compulsory tourist insurance, the victim, the beneficiary):

in the form of a message via the text short message service (hereinafter referred to as SMS message) to the subscriber number specified by the policyholder (insured, victim, beneficiary) provided by the cellular operator (hereinafter referred to as the subscriber number);

2) in the form of an electronic message to the email address specified by the policyholder (insured, victim, beneficiary) (if available).

The policyholder (the insured, the injured, the beneficiary), when concluding an insurance contract and (or) settling insured events on the insurer’s Internet resource and (or) the partner’s Internet resource, chooses one or more of the methods of sending a notification by the insurer specified in this paragraph of the Notification Rules.

In other cases of concluding insurance contracts and (or) settling insurance cases in electronic form, the choice of the method of notification by the insurer to the policyholder (tourist insured under compulsory insurance, the victim, the beneficiary) about the conclusion of the insurance contract and (or) settlement of insurance cases and the content of the notification is carried out by the insurer independently.

4. Notification from the Unified Insurance System about the conclusion of an insurance contract and the settlement of an insured event is sent to the policyholder (insured under compulsory tourist insurance, victim, beneficiary) in the form of:

SMS messages to the subscriber number specified by the policyholder (insured, victim, beneficiary);

2) an electronic message to the email address specified by the policyholder (insured, victim, beneficiary).

The policyholder (insured, victim, beneficiary) - an individual, when concluding an insurance contract and (or) settling insured events in electronic form, receives a notification from the Unified Database in the form of an SMS message to the specified subscriber number and, at his own choice, has the opportunity to additionally receive an electronic message from the Unified Database at the email address specified by him.

The policyholder (insured, victim, beneficiary) - a legal entity, when concluding an insurance contract and (or) settling insured events on the insurer’s Internet resource and (or) the partner’s Internet resource, has the opportunity to choose one or more of the methods of sending a notification from the Unified Database System specified in this paragraph of the Notification Rules.

In other cases of concluding insurance contracts and (or) settling insurance claims in electronic form, the choice of the method of notifying the policyholder (insured, injured, beneficiary) - a legal entity about the conclusion of an insurance contract and (or) settling insurance claims from the Unified Database is carried out by the insurer independently, taking into account the requirements established by this paragraph of the Notification Rules.

5. If the policyholder (the insured, the victim, the beneficiary) does not have or does not indicate an email address on the insurer’s Internet resource to receive a notification, as well as the policyholder (the insured, the victim, the beneficiary) selects notification in the form of an SMS message, the insurer sends an SMS message to the subscriber number specified by the policyholder (the insured, the victim, the beneficiary), which contains:

for an individual:

surname and initials of the insured (tourist insured under compulsory insurance, victim, beneficiary);

an active hyperlink to the page of the insurer's Internet resource for access to information on the concluded insurance contract and (or) insured events, containing the information specified in paragraph 6 of the Notice Rules, as well as the insurance rules (standard conditions) for the corresponding class of insurance;

other data at the discretion of the insurer;

for a legal entity:

full or short name of the insured (insured, victim, beneficiary);

an active hyperlink to the page of the insurer's Internet resource for access to information on the concluded insurance contract and (or) insured events, containing the information specified in paragraphs 6 and 7 of the Notice Rules, as well as the insurance rules (standard conditions) for the corresponding class of insurance;

other data at the discretion of the insurer.

6. The insurer’s notification of the conclusion of an insurance contract in the form of an electronic message contains:

for the policyholder - an individual:

last name, first name and patronymic (if any) of the policyholder (insured);

unique insurance contract number assigned by ESBD;

validity period of the insurance contract;

basic insurance conditions (amount of insurance premium, insurance limits, object of insurance);

the procedure for the policyholder (insured) in the event of an insured event;

procedure for filing an application for insurance payment;

other information under the insurance contract at the discretion of the insurer;

for a tourist insured under compulsory insurance:

surname, name and patronymic (if any) of the insured (insured);

unique insurance contract number assigned by ESBD;

validity period of the insurance contract;

insurance territory;

basic insurance conditions (amount of insurance premium, insurance limits, object of insurance);

the procedure for the policyholder (insured) in the event of an insured event;

procedure for filing an application for insurance payment;

other information under the insurance contract at the discretion of the insurer;

for the policyholder - a legal entity:

name of the insured;

unique insurance contract number;

validity period of the insurance contract;

basic insurance conditions (amount of insurance premium, insurance limits, object of insurance);

the procedure for the policyholder (insured) in the event of an insured event;

procedure for filing an application for insurance payment.

Other information under the insurance contract that is not specified in the insurer’s notification of concluding the insurance contract is sent by displaying an active hyperlink to the page of the insurer’s Internet resource containing this information.

7. The insurer’s notification about the main stages of the process of settling an insured event under an insurance contract in the form of an electronic message contains:

last name, first name and patronymic (if any) of the policyholder (insured, victim, beneficiary) - for an individual;

full or short name of the policyholder (insured, victim, beneficiary) - for a legal entity

information about registration of an insured event in the Unified Database and the unique number of the insured event assigned to the Unified Database;

ESBD Internet resource address;

information about the completion of the collection of documents or the need to correct the information specified in the application and (or) re-upload the documents within the period specified by the insurer;

information about the refusal to accept documents for settlement of an insured event, indicating the reasons for the refusal;

familiarization with the amount of the assessment of the amount of harm (report on the amount of harm) and its agreement, as well as with the amount to be paid;

information about the amount of insurance payment and the date of its implementation;

information about damage to property and/or life and health;

information about creating a personal account;

information about the possibility of resolving a dispute arising from an insurance contract by contacting the insurance ombudsman;

other information regarding the settlement of the insured event at the discretion of the insurer.

Other information on the settlement of the insured event that is not specified in the insurer’s notification of the settlement of the insured event is sent by displaying an active hyperlink to the page of the insurer’s Internet resource containing this information.

8. Notification from the Unified Database about the conclusion of an insurance contract, sent in the form of an SMS message or an electronic message, is sent upon receipt of information from the insurer about the conclusion of an insurance contract in electronic form and contains:

for the policyholder:

short or full name of the insurer;

unique contract number;

ESBD Internet resource address;

validity period of the insurance contract;

registration number of the vehicle (for compulsory civil liability insurance of vehicle owners);

for a tourist insured under compulsory insurance:

short or full name of the insurer;

unique contract number;

ESBD Internet resource address;

validity period of the insurance contract;

insurance territory.

9. Notification of the policyholder (insured, injured, beneficiary) from the Unified Insurance System about the settlement of an insured event under an insurance contract, sent in the form of an SMS message or an electronic message, is sent upon receipt of information from the insurer about the settlement of an insured event under an insurance contract in electronic form and contains:

short or full name of the insurer;

information about registration of an insured event in the Unified Database and the unique number of the insured event assigned to the Unified Database;

ESBD Internet resource address;

information about the settlement of an insured event;

information about creating a personal account on the ESBD Internet resource;

other information on the settlement of the insured event at the discretion of the organization for the formation and maintenance of the Unified Data System.

10. Costs of notification from the Unified Database about the conclusion of an insurance contract and (or) settlement of an insured event, sent in the form of an SMS message, are subject to reimbursement by the insurer based on the actual number of SMS messages sent for each insurer.

The organization for the formation and maintenance of the unified database on a monthly basis, no later than the 10th day of each month, sends for approval to the insurer a report on the number of SMS messages sent over the past month and the amount of expenses to be reimbursed, which is subject to approval by the insurer no later than 3 business days from the date of its receipt.

11. Under the contract of compulsory tourist insurance, the subscriber number and (or) email address of the insured is indicated by the insured.

Appendix 3 to the Resolution of the Board of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market dated April 27, 2020 No. 50

Requirements for software and hardware and Internet resources of an insurance (reinsurance) organization, a branch of a non-resident insurance (reinsurance) organization of the Republic of Kazakhstan, ensuring the conclusion of insurance contracts, the exchange of electronic information resources between the policyholder and the insurer

Footnote: Footnote. Title as amended by the resolution of the Board of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market dated 02/12/2021 No. 28 (shall be enforced from the date of its first official publication).

These Requirements for software and hardware and Internet resources of an insurance (reinsurance) organization, a branch of a non-resident insurance (reinsurance) organization of the Republic of Kazakhstan, ensuring the conclusion of insurance contracts, the exchange of electronic information resources between the policyholder and the insurer (hereinafter - the Requirements) are developed in accordance with the Law of the Republic "On Insurance Activities" (hereinafter - the Law) and determine the requirements for software and hardware and Internet resources of an insurance (reinsurance) organization (hereinafter referred to as the insurer), ensuring the conclusion of insurance contracts and the exchange of electronic information resources between the policyholder and the insurer.

2. For the purposes of the Requirements, the following concepts are used:

anti-bot – a test or software that requests confirmation that an Internet resource is being accessed by a person and not a bot.

2) bot – software used by third parties to automatically perform certain operations according to a given schedule and (or) algorithm in the insurer’s information system;

3) insurer - an insurance organization, a branch of a non-resident insurance (reinsurance) organization of the Republic of Kazakhstan, carrying out activities for the conclusion and execution of insurance contracts on the basis of the relevant license of the authorized body;

4) DDoS attack – a distributed denial of service attack by third parties with the aim of disrupting the normal operation of an information system or creating conditions under which free access to the provided information resources will be unavailable or difficult.

3. The insurer maintains constant performance and ensures uninterrupted functioning of its software and hardware and Internet resources that ensure the conclusion of insurance contracts and the settlement of insured events, the exchange of electronic information resources between the policyholder (the insured, the victim, the beneficiary) and the insurer.

4. The insurer’s software and hardware provide:

the ability to switch to the Internet resource of the Unified Insurance Database (hereinafter referred to as the UIDB) for the policyholder (the insured, the victim, the beneficiary) to check information on the insurance contract and insured events through the UIDB information system;

storage of the insurance contract and information on insured events in electronic form, ensuring unhindered round-the-clock access to it for the policyholder (insured, victim, beneficiary) on the insurer’s Internet resource;

the possibility of performing the actions specified in subparagraph 6) of paragraph 4 of Article 15-2 of the Law;

continuous registration and storage for 18 (eighteen) months of the following information in electronic form about the actions of the policyholder (persons intending to enter into an agreement, the insured, the victim, the beneficiary) and the insurer, performed using this Internet resource, and carried out after the policyholder (the insured, the victim, the beneficiary) fills out an application for concluding an insurance contract and (or) settling insured events:

serial number of the action record in the automated system, software;

date (day, month, year) and time (hours, minutes, seconds) of the action;

a set of characters assigned to a person performing actions on an Internet resource and allowing him to be identified in an automated system or software;

code corresponding to the action being performed;

identification information (IP address) from which the Internet resource was accessed;

information transmitted by the policyholder (insured, victim, beneficiary) through the insurer’s Internet resource, including files and documents uploaded by the policyholder (insured, victim, beneficiary);

identification information about errors in the automated system, Internet resource software.

4-1. The insurer's software and hardware ensures the following operations:

maintaining the General Ledger, taking into account all branches and representative offices, in accordance with the requirements for automated information systems established by the legislation of the Republic of Kazakhstan;

2) maintaining auxiliary accounting records for all transactions performed, in accordance with the requirements of the automated information system established by the legislation of the Republic of Kazakhstan;

3) accounting for the formation and changes in insurance reserves;

4) change of information about the reinsurer, insurance agent, insurance broker, policyholder, beneficiary, actuary (if the last name, first name, patronymic or full name of a legal entity is changed, the safety of the changed data and the search for a registered person using the previous data);

5) accounting for the receipt of insurance premiums and the implementation of insurance payments in the context of classes (types) of insurance, individuals and legal entities, by economic sector code, by type of economic activity, based on residence (resident/non-resident), location of the insured and the insurance object in the regions of the Republic of Kazakhstan and other countries;

6) accounting for reinsurance activities by classes (types) of insurance, based on residency (resident/non-resident), location of the reinsurer;

7) formation and maintenance of a database for accounting of insurance and reinsurance contracts, by industry and insurance class;

8) formation and maintenance of an information database for recording settled and unresolved claims under insurance and reinsurance contracts, insurance risks (volume of obligations, volume of obligations transferred to reinsurance), insured events (number of received applications, refusals, unresolved losses) and insurance payments, broken down by classes (types) of insurance, individuals and legal entities, by economic sector code, by type of economic activity, by residency (resident/non-resident), location of the policyholder and the insurance object by regions of the Republic of Kazakhstan and other countries (insurance statistics database);

9) maintaining records of strict reporting forms (insurance policies) used in the activities of insurance (reinsurance) organizations;

10) maintaining a register of insurance agents;

11) formation and maintenance of registers of branches and executive employees of an insurance (reinsurance) organization.

4-2. The insurer's software and hardware for accounting for insurance and reinsurance contracts must contain the following information:

last name, first name, patronymic (if any) of the policyholder/reinsurer (if he is an individual) or his name (if he is a legal entity);

2) gender and date of birth of the policyholder (for insurance (reinsurance) organizations operating in the “life insurance” industry);

3) class, type (product) of insurance;

4) contract number;

5) date of conclusion and validity period of the contract;

6) the number of insurance objects under the contract;

7) the amount of the insured amount under the contract;

8) insurance rate;

9) the amount of the insurance premium under the contract;

10) the amount of the insurance premium and the frequency of its payment (for insurance (reinsurance) organizations operating in the “life insurance” industry);

11) the amount of the insurance premium at the rate established by the legislation on compulsory insurance;

12) the amount of discount on the insurance premium;

13) the basis for granting the discount;

14) the amount and date of the actual premium paid;

15) last name, first name, patronymic (if any) of the insurance intermediary (if it is an individual) or its name (if it is a legal entity);

16) the amount of commission to the insurance intermediary;

17) place of conclusion of the contract;

18) name of the reinsurer, insurance broker;

19) reinsurance agreement number;

20) the amount of liability transferred to the reinsurer;

21) the amount of the reinsurance premium under the reinsurance agreement;

22) the amount of commission from the reinsurer under the reinsurance agreement;

23) the amount to be transferred to the reinsurer.

4-3. The insurer's software and hardware for recording settled and unresolved claims must contain the following information:

date of registration of the insured event;

2) date of occurrence of the insured event;

3) last name, first name, patronymic (if any) of the policyholder (if he is an individual) or his name (if he is a legal entity);

4) last name, first name, patronymic (if any) of the beneficiary (if he is an individual) or his name (if he is a legal entity);

5) number of the insurance/reinsurance contract;

6) class or type of insurance;

7) duration of the agreement;

8) the declared amount of loss;

9) expenses for settling the loss;

10) the amount of damage assessed;

11) the amount and grounds for refusal of insurance payment;

12) the insured amount under the contract;

13) franchise agreement;

14) the reinsurer’s share in the insurance payment;

15) name of the reinsurer;

16) reinsurance agreement number;

17) accrued amount to be paid;

18) amount and date of payment.

5. If the authorized body for regulation, control and supervision of the financial market and financial organizations makes a decision to suspend or revoke the insurer’s license:

the interaction of the Unified Database System with the information systems of the insurer, which is necessary for concluding an insurance contract and settling insured events (in case of revocation of a license) for the corresponding class of insurance, is suspended (terminated);

the insurer posts on its Internet resource information about the impossibility of concluding insurance contracts and settling insurance claims (in case of revocation of a license) indicating the reason and suspends (terminates) the operation of Internet resources.

6. The insurer ensures the protection of its Internet resource and information systems, including information systems integrated with state databases and the Unified Database, as well as data obtained from state databases and the Unified Database, from bots, DDoS attacks and the use of other malicious software by third parties through the use of anti-bot solutions and other technical and technological methods of protection.

The insurer includes information about the implemented methods of protecting the Internet resource and information systems aimed at protecting against bots, DDoS attacks and the use of other malicious software by third parties in information about the state of the information security management system provided in accordance with the Requirements for the Organization of Safe Operations, ensuring the safety and protection of information from unauthorized access to data stored in the insurance (reinsurance) organization, as well as the cybersecurity of the insurance (reinsurance) company. organizations approved by Resolution of the Board of the National Bank of the Republic of Kazakhstan dated July 30, 2018 No. 164 (registered in the Register of State Registration of Normative Legal Acts under No. 17289).

7. The insurer does not allow unauthorized employees of the insurer to use accounts (cryptographic keys, electronic digital signature keys) for unauthorized access to the unified database using technical and technological security methods.

If the insurer detects unauthorized access to the Unified Database Database, the insurer, within 12 (twelve) hours from the moment of discovery, sends this information on paper and (or) electronically to the organization for the formation and maintenance of the database.

The organization for the formation and maintenance of the database, after receiving information from the insurer or independently identifying the fact of unauthorized access to the Unified Database Database, blocks the account (cryptographic key, electronic digital signature key) of the insurer for access to the Unified Database Database, through which unauthorized access was made, with the possibility of simultaneously re-issuing a new account (cryptographic key, electronic digital signature key).

If the insurer's access to the Unified Database is blocked, the organization for the formation and maintenance of the database, within 1 (one) business day from the moment the insurer's access to the Unified Database is blocked, sends this information on paper or in the form of an electronic document to the authorized body for regulation, control and supervision of the financial market and financial organizations.

The insurer, no later than 2 (two) business days from the date of detection of the fact of unauthorized access to the Unified Database Database, sends to the authorized body for regulation, control and supervision of the financial market and financial organizations and the organization for the formation and maintenance of the database on paper or in the form of an electronic document information about the measures taken to eliminate the fact of unauthorized access of third parties to the account (cryptographic keys, electronic digital signature keys) of the insurer.

If taking measures to eliminate the fact of unauthorized access of third parties to the account (cryptographic keys, electronic digital signature keys) of the insurer requires more than 2 (two) business days, the insurer within the specified period provides an action plan to eliminate the fact of unauthorized access of third parties to the account (cryptographic keys, electronic digital signature keys) of the insurer, indicating the planned activities, the timing of their completion and the responsible persons (hereinafter referred to as the action plan).

8. The organization for the formation and maintenance of the database unlocks the account (cryptographic key, electronic digital signature key) of the insurer for access to the Unified Database Database, through which unauthorized access was carried out, within 3 (three) business days after the insurer provides a detailed report on eliminating the identified vulnerabilities (report on the implementation of the action plan) and the results of the measures taken.