Main Problem: The article addresses the issue of personal data protection in the context of technological advancements and the risks of data leaks, as well as the insufficient effectiveness of legislation, especially in Kazakhstan. Objective: The aim of the research is to analyze the development of the personal data protection institution globally and in Kazakhstan, evaluating existing approaches and challenges in legal regulation. Methods: The methods used include analyzing regulatory documents, evaluating research from Kazakhstan’s ministries, and comparing international practices in personal data protection. Results and their value: currently: The results show that personal data protection is a crucial part of human rights and requires improvement in legislation, especially in Kazakhstan. Issues of data leaks and weaknesses in protection need to be addressed, including the establishment of effective agencies and increasing public awareness of cybersecurity.