Kazakhstan is moving to restrict WhatsApp and Telegram for government employees starting July 12, 2026, when a new order from the Ministry of Artificial Intelligence and Digital Development takes effect. Order No. 343 requires civil servants, quasi-state sector workers, and owners of critical infrastructure facilities to use only messengers and email services with servers physically located inside Kazakhstan - a requirement neither WhatsApp nor Telegram meets.
What the new order actually requires
WhatsApp belongs to Meta, an American company, and Telegram is formally registered in the United Arab Emirates. Neither stores user data on Kazakh servers, so both fall outside the new rule the moment it takes effect. In their place, officials are pushed toward Aitu, a domestic messenger whose infrastructure sits entirely inside the country. The transition has technically been underway since September 2025, but the July 12 deadline turns a soft recommendation into an enforceable requirement. The Ministry of Artificial Intelligence and Digital Development has stated the mandate covers only official correspondence in government and quasi-government agencies - it is not, on paper, a personal-use ban on WhatsApp or Telegram for individual officials outside working duties.
How compliance will be checked
Enforcement runs through the National Security Committee (KNB), which controls Kazakhstan's internet gateway. Kazakh outlets report that from July 2026 the KNB will be technically capable of seeing which officials open WhatsApp during working hours, and that non-compliant employees can be added to mandatory inspection lists - a monitoring capability neither the ministry nor the KNB has publicly detailed or denied. Developers of Aitu have not disclosed the conditions under which they might share data with authorities, though officials have acknowledged that "access when necessary" is possible - language that leaves plenty of room for interpretation, and that fuels the privacy concerns independent commentators have raised about the rollout.
A familiar playbook
Kazakh outlets covering the order have drawn a direct line to Russia's own messenger crackdown, which also began with mandatory rules for officials before expanding outward. Critics point to the same three-stage pattern: restrict civil servants first, extend the rule to state-linked companies next, and eventually apply pressure to ordinary citizens through app store removals, throttling, or outright blocking. Kazakhstan has not announced plans for a public-facing ban, but the sequencing is the part observers are watching most closely.
Why this matters beyond Kazakhstan's civil service
Central Asian states have often followed Moscow's regulatory lead on internet censorship and surveillance policy, from SORM-style lawful-intercept systems to periodic Telegram throttling. A domestic-server mandate is a lower-friction way to reduce reliance on foreign platforms than an outright ban: it does not require blocking technology or public justification, just an administrative order and an internet gateway capable of logging traffic. That combination is exactly what's now in place in Kazakhstan, and it is far cheaper to maintain than a technical blocking regime: no deep-packet-inspection infrastructure to build, no international bandwidth to throttle, just a procurement rule and a monitoring dashboard.
- Effective date: July 12, 2026.
- Who is affected: civil servants, quasi-state employees, critical infrastructure owners.
- Required alternative: Aitu, a Kazakhstan-hosted national messenger.
- Enforcement: KNB gateway monitoring plus mandatory inspection listings for non-compliance.
For officials and infrastructure operators who still need to reach international contacts through WhatsApp or Telegram outside the scope of official duties, a secure VPN routes that traffic through servers outside Kazakhstan's monitored gateway, restoring the kind of connection privacy the domestic-server mandate is designed to strip away - though it does nothing to change the underlying requirement to use Aitu for official business.
