In the context of digital transformation in the Republic of Kazakhstan, artificial intelligence technologies are increasingly used in public administration and the private sector. Their application involves large-scale automated processing of personal data, which creates additional legal risks for the realization of constitutional rights. The current legislation does not fully take into account the specific features of algorithmic decision-making and profiling. To analyze existing legal guarantees for personal data protection in the use of artificial intelligence technologies and to identify directions for improving the legislation of the Republic of Kazakhstan. The study applies formal legal analysis of regulatory acts, a systemic approach, and elements of legal modeling. It is established that the current regulatory framework provides basic guarantees for personal data protection; however, it requires clarification in the context of automated decision-making and algorithmic processing.