Asian Journal of Criminal Justice and Forensic Studies

  • Received 18.07.2025,
  • Revised 12.11.2025,
  • Accepted 16.12.2025
Download article Download article
Vol. 1, No. 1. 2025
  • freedom; criminal justice; state control; human rights; implementation of laws; data leakage
  • Pages 4-14

The aim of this study was to compare Kazakhstani and Chinese models of privacy and security in biometric systems. The research established that Kazakhstan and China represent two different approaches to biometric identification: the former is a balanced model between state control and international standards, while the latter is a utilitarian model in which state security is prioritised. The study applied theoretical analysis to conceptually distinguish key terms and identify threats; a comparative-legal analysis of the legislation of Kazakhstan and China; and the case-study method to examine high-profile incidents of data leaks and political surveillance. The research found that China implements a utilitarian model of total control (via the “Xueliang” project), whereas Kazakhstan – despite its declared balanced/transitional model with a focus on forensics – de facto exhibits weak law enforcement and a tendency towards data leaks. This is evidenced by an explosive 101.7% rise in cyber incidents in the first quarter of 2025, which renders the country vulnerable to threats of authoritarian surveillance. It was demonstrated that in both jurisdictions the absence of genuine voluntariness of consent and the opacity of biometric application are key privacy risks. A number of practical recommendations were formulated for Kazakhstan, including strengthening enforcement (introducing independent cybersecurity audits) and enshrining the principle of proportionality in law to restrict mass facial recognition. The results are important for shaping effective legal mechanisms in transitional states to protect civil liberties. Accordingly, the findings may be considered by countries at the stage of implementing biometric technologies to better understand potential risks and challenges

References

  1. Acquista, A.N. (2020). Biometrics takes off–fight between privacy and aviation security wages on. Journal of Air Law and Commerce, 85(3), 475-569.
  2. Ayanaba, R.A. (2022). Image-assisted biometric identification. Advances in Multidisciplinary and Scientific Research Journal, 1(1), 131-138. doi: 10.22624/aims/crp-bk3-p22.
  3. Baifat, F.R., & Satoto, S. (2024). Legal challenges and uncertainties: The use of biometric information technology in immigration control. International Journal of Multidisciplinary Research and Analysis, 7(1), 328-332. doi: 10.47191/ijmra/v7-i01-40.
  4. Ben Abdel Ouahab, I., Elaachak, L., Bouhorma, M., Alluhaidan, Y.A., & Zafar, B. (2024). Voice biometric technology: Enhancing public safety and security in smart cities. In 2024 mediterranean smart cities conference (MSCC) (pp. 1-6). Tetuan: IEEE. doi: 10.1109/mscc62288.2024.10697089.
  5. Bertayeva, K., Onaltayev, D., Akimbayeva, K., & Issaeva, A. (2024). Digitalization of Kazakhstani banks. Bulletin of “Turan” University, 4, 62-74. doi: 10.46914/1562-2959-2024-1-4-62-74.
  6. Buralkieva, D. (2022). Biometric data collection: What risks might Kazakhstanis face? Retrieved from https://cabar.asia/en/biometric-data-collection-what-risks-might-kazakhstanis-face.
  7. Chen, W., & Wang, М. (2023). Regulating the use of facial recognition technology across borders: A comparative case analysis of the European Union, the United States, and China. Telecommun Policy, 47(2), article number 102482. doi: 10.1016/j.telpol.2022.102482.
  8. Choudhry, M.D., Sundarrajan, M., Jeevanandham, S., & Saravanan, V. (2024). Security and privacy issues in AI-based biometric systems. In S. Balasubramaniam, S. Kadry, A. Prasanth & R.K. Dhanaraj (Eds.), AI based advancements in biometrics and its applications (рр. 85-100). Boca Raton: CRC Press. doi: 10.1201/9781032702377-5.
  9. Datta, P., Bhardwaj, S., Panda, S.N., Tanwar, S., & Badotra, S. (2020). Survey of security and privacy issues on biometric system. In B. Gupta, G. Perez, D. Agrawal & D. Gupta (Eds.), Handbook of computer networks and cyber security (pp. 763-776). Cham: Springer. doi: 10.1007/978-3-030-22277-2_30.
  10. Dyussembekova, Z. (2021). Kazakhstan creating criminal DNA database. Retrieved from https://astanatimes.com/2017/06/kazakhstan-creating-criminal-dna-database/.
  11. Dzhaksybekova, G., & Pulatov, I. (2020). Features and prospects of biometric security measures in operations with payment bank cards. Eurasian Union Scientists, 6(4(73)), 47-55. doi: 10.31618/ESU.2413-9335.2020.6.73.688.
  12. Ersozoglu, E. (2013). The Xeuliang project: Expansion of China’s state surveillance programme. Retrieved from https://greydynamics.com/the-xeuliang-project-expansion-of-chinas-state-surveillance-programme/.
  13. Faraldo Cabana, P. (2023). Technical and legal challenges of the use of automated facial recognition technologies for law enforcement and forensic purposes. In A. Završnik & K. Simončič (Eds.), Artificial intelligence, social harms and human rights. Critical criminological perspectives (pp. 35-54). Cham: Palgrave Macmillan. doi: 10.1007/978-3-031-19149-7_2.
  14. Girdhar, N., Sahu, M., & Lin, C.-C. (2024). Emerging trends in biomedical trait-based human identification: A bibliometric analysis. SLAS Technology, 29(3), article number 100136. doi: 10.1016/j.slast.2024.100136.
  15. Gritsenko, D., Trochev, A., & Vehkalahti, K. (2025). Public perception of algorithmic policing in a non-democratic context: Evidence from Kazakhstan. Policing and Society, 35(10), 1357-1376. doi: 10.1080/10439463.2025.2489954.
  16. Haley, P. (2025). The impact of biometric surveillance on reducing violent crime: Strategies for apprehending criminals while protecting the innocent. Sensors, 25(10), article number 3160. doi: 10.3390/s25103160.
  17. Hatami, S., Rahimi, F., Aghaei, E.A.M., & Shahsavandi, E. (2023). Legal challenges of biometric identity systems in law enforcement of recognition policy (voice): A case study of siip in Europe. Мodern Technologies Law, 4(8), 101-118. doi: 10.22133/mtlj.2023.382577.1160.
  18. Kumar, S. (2024). Biometric systems security and privacy issues. In A. Selwal, D. Sharma, M. Mann, S. Chakraborty, V.E. Balas & O.E. Lieh (Eds.), Leveraging computer vision to biometric applications (рр. 68-91). New York: Chapman and Hall/CRC. doi: 10.1201/9781032614663-4.
  19. Law of the People’s Republic of China “Personal Information Protection Law” (PIPL). (2021, August). Retrieved from https://personalinformationprotectionlaw.com/PIPL/hello-world/.
  20. Law of the Republic of Kazakhstan “On Fingerprint and Genomic Registration”. (2021, January). Retrieved from https://www.gov.kz/situations/324/intro?lang=en.
  21. Law of the Republic of Kazakhstan No. 271-IV “On the Prevention of Offences”. (2025, July). Retrieved from https://online.zakon.kz/Document/?doc_id=30657323&show_di=1.
  22. Law of the Republic of Kazakhstan No. 94-V “On Personal Data and Their Protection”. (2013, May). Retrieved from https://adilet.zan.kz/kaz/docs/Z1300000094.
  23. Li, Z., Guo, Y., Yarime, M., & Wu, X. (2023). Policy designs for adaptive governance of disruptive technologies: The case of facial recognition technology (FRT) in China. Policy Design and Practice, 6(1), 27-40. doi: 10.1080/25741292.2022.2162248.
  24. Muratuly, D., Denissova, N., Krak, Y., & Apayev, K. (2022). Biometric authentication of students to control the learning process in online education. Scientific Journal of Astana IT University, 10(10), 22-32. doi: 10.37943/lyfw8581.
  25. Peacher, Н.В. (2021). Regulating facial recognition technology in an effort to avoid a minority report like surveillance state. Marquette Intellectual Property & Innovation Law Review, 25(1), 20-40.
  26. Ruan, Z., Jiang, C., Chen, X., & Wang, M. (2025). China: New rules issued to further regulate application of face recognition technology in China. Retrieved from https://connectontech.bakermckenzie.com/china-new-rules-issued-to-further-regulate-application-of-face-recognition-technology-in-china/.
  27. Satubaldina, А. (2025). What we know about data leak affecting 16 million Kazakh citizens. Retrieved from https://astanatimes.com/2025/07/what-we-know-about-data-leak-affecting-16-million-kazakh-citizens/.
  28. Security Management Measures for the Application of Facial Recognition Technology. (2025, March). Retrieved from https://www.gov.cn/zhengce/zhengceku/202503/content_7016075.htm.
  29. Sembiring, P.E., Ramli, A.M., & Rafianti, L. (2024). Implementasi desain privasi sebagai pelindungan privasi atas data biometrik. Veritas et Justitia: Jurnal Ilmu Hukum, 10(1), 127-152. doi: 10.25123/vej.v10i1.7622.
  30. Singh, G., Bhardwaj, G., Singh, S.V., & Garg, V. (2021). Biometric identification system: Security and privacy concern. In S. Awasthi, C.M. Travieso-González, G. Sanyal, & D. Kumar Singh (Eds.), Artificial intelligence for a sustainable Industry 4.0 (pp. 245-264). Cham: Springer. doi: 10.1007/978-3-030-77070-9_15.
  31. Smart Cities Challenges and Opportunities. (n.d.). Retrieved from https://surl.li/qzgkdp.
  32. Sutkowski, M., Pakuła, A., & Paśko, S. (2024). Modern system for face biometrics data registration. Internal Security, 15(2), 73-82. doi: 10.5604/01.3001.0054.4770.
  33. The number of cyberattacks in Kazakhstan has doubled. (2025). Retrieved from https://profit.kz/news/70516/Kolichestvo-kiberatak-v-Kazahstane-viroslo-srazu-vdvoe/.
  34. Țical, G.-M. (2025). Facial recognition and biometric systems: Benefits and challenges for law enforcement. Land Forces Academy Review, 30(2), 249-259. doi: 10.2478/raft-2025-0024.
  35. Toqmadi, M., & Zakharchenko, N. (2021). I agree to terms and conditions: Negotiating privacy online in Central Asia. JeDEM – EJournal of eDemocracy and Open Government, 13(1), 71-100. doi: 10.29379/jedem.v13i1.633.
  36. Tripathi, D.R., & Nishad, D.K. (2020). Biometric authentication systems: A survey. Turkish Journal of Computer and Mathematics Education, 11(3), 2878-2884. doi: 10.61841/turcomat.v11i3.14653.
  37. Utegen, D., & Rakhmetov, B.Z. (2023). Facial recognition technology and ensuring security of biometric data: Comparative analysis of legal regulation models. Journal of Digital Technologies and Law, 1(3), 825-844. doi: 10.21202/jdtl.2023.36.
  38. What you need to know about dactyloscopy and genome registration of citizens. (2024). Electronic government of the Republic of Kazakhstan. Retrieved from https://egov.kz/cms/en/articles/for_foreigners/dactyloscopy_genome_registration.
  39. Zhang, J. (2024). The shield of privacy in the digital age: The clash between facial recognition technology and personal information protectioncase analysis and strategy discussion. Advances in Social Behavior Research, 8(1), 66-77. doi: 10.54254/2753-7102/8/2024066.

Submission