Skip to main content

SHIELD

Linkedin Youtube
DONATE

FARO Directory

FARO stands for Frontline Record of Online Harms. Technology-related harm usually reaches the public one case at a time: a school in one country, a family in another, each easy to treat as an exception. This directory puts those cases side by side to help grassroots actors see where others face the same issues they do, and to help governments and regulators see the bigger picture of the harms occurring. The directory describes what its records contain. It does not measure how often these harms occur, and a country with few records may simply have little published about it.

How to use this directory: Topics are filterable for FARO reports that have already been created based on these incidents. The harms and response patterns shown are those featured there. To see the incidents used in a country-specific report, choose that country under Country report. Pick a pattern or evidence type to see on the map which countries have matching records. Click a country on the map or in the list to see its records below. Use the filter to search for keywords or specific sources.

Shaded countries have at least one record. Choose a pattern to see where it appears.

At least one matching recordNo matching recordSelected country

Shading shows only that a country has at least one record in this directory that matches your selection, and every shaded country looks the same on purpose. It says nothing about how often these harms occur there. Pattern filters only cover records classified so far, and small countries are easy to miss on a map, so use the list as well.

Countries

In the list but not drawn on the map: Multiple countries, Not stated.

Country: Kazakhstan Clear all

3 results

Cards List
Kazakhstan
Technology in Education
Academic research
Human Rights Watch
18/10/2026

Daryn Online, an educational website built by a Kazakh startup and recommended by Kazakhstan's Ministry of Education in March 2020, gained 1.5 million new users within days. By April 1, 2020 it was offering advertisers a banner on the login and registration page that students had to pass through to reach their classes, at 70,000 KZT (US$164) a day. Its privacy policy says it may use a child's search history, messages and comments to teachers, classmates or on homework for advertising and sponsorship purposes, and may provide 'anonymous' data to third parties, partners and advertisers.

Kazakhstan
Technology in Education
Academic research
Human Rights Watch
18/10/2026

100Ballov, a website endorsed by Kazakhstan's Education Ministry and adopted by schools as the 'educational portal for schoolchildren and students,' was found to send information about its students to AddThis, a marketing company owned by Oracle, through six cookies that in turn loaded four more trackers from AddThis's advertising partners (two DoubleClick, two Tapad). The site has no privacy policy; its 'Privacy Policy' link points back to the homepage. Oracle said any receipt of children's data through AddThis would violate its policies but did not say whether it received data from 100Ballov. 100Ballov did not respond to HRW.

Kazakhstan
Technology in Education
Academic research
Human Rights Watch
18/10/2026

HRW found Daryn Online using Yandex session recording, which Yandex describes as recording clicks, scrolls, keystrokes and mouse movements, and detected key logging on the site as well. HRW also detected the website transmitting children's personal data to Google, CloudFlare, Yandex and Facebook. Daryn Online was one of 23 educational websites endorsed by eight governments that HRW found using session recorders, and it did not respond to HRW's request for comment.

About the records

Each record is a short summary of an incident described in a public source or collected through an interview by SHIELD or its partners. Records are reviewed by people before they appear here. Names and identifying details are removed: where a person appears, a role, age band and gender stand in for the name, and dates and places for minors are generalised. Every record links to its original source and shows the date that link was last checked. Records are classified with shared harm categories. The classification is SHIELD's own, so it can differ from how a source describes the incident.

Using the directory

You are welcome to read, link to and quote individual records with credit to FARO. Please do not copy, scrape or republish the dataset in bulk, or use it to train or test automated systems, without written permission. To ask for permission, use the SHIELD contact form. The original sources keep their own rights, and the link on each record leads to them.

How to cite

SHIELD-APS. Frontline Record of Online Harms (FARO). DIRECTORY-URL. Accessed [date]. To cite a particular selection, use the web address shown after you set the filters.

When you rely on the facts of an incident, cite the original source it links to. When you rely on the classification, the patterns or the country report, cite FARO. Please describe the records as documented incidents and do not present counts or country coverage as how often these harms happen. A country with few records may simply have little published about it.

Corrections and removals

If a record is wrong, a link no longer works, or you are described in a record and want it changed or removed, use the SHIELD contact form and include the title of the record. We review each request and update or remove the record where the request is justified.

Report an incident

Know of a documented incident that belongs here? Send it through the incident form. A public source, such as a news report, a court or regulator decision, or a research publication, helps us verify it quickly. Submissions without a public source are kept anonymous and are not tied to named products or companies. Please leave out the names of children and of anyone who has not agreed to be named. Submissions are reviewed before anything is published, and sending one does not guarantee a record.