The Russian State Duma has adopted in the third reading the draft law that proposes to stiffen penalties for violation of rules applicable to personal data processing in Russia, as established by Federal Law No. 152-FZ “On Personal Data”. The fine for first time violators could reach up to RUB 6. Repeated violations of the data localization law can incur increasing fines with a maximum penalty of RUB 18 million for legal entities.
The main legal requirement is to store the information about Russian users must be stored in the territory of the Russian Federation. On December 2, 2019, President Vladimir Putin signed Federal Law No. 405-FZ, On the Introduction of Amendments to the Administrative Offenses Code of the Russian Federation. As of December 13, 2019, the Code has introduced new constituent element of an administrative offense – breach of localization requirements.
Failure by an operator to comply with the requirement leads to increased fines:
for officials – up to RUB 200,000 (approximately US$3,350)
for legal entities – up to RUB 6,000,000 (approximately US$100,000)
For repeated violation:
for officials – up to RUB 800,000 (approximately US$13,350)
for legal entities – up to RUB 18,000,000 (approximately US$ 300,000)
Load testing is the process of putting demand on a system and measuring its response. Load testing generally refers to the practice of modeling the expected usage of a software program by simulating multiple users accessing the program concurrently. This test method allows you to determine whether the tested solution, application or device meets the stated requirements.
CT Consulting specialists in cooperation with partner-expert Performance Lab team made all necessary changes with the subsequent transfer of tests. Load testing was successful, CT Consulting has managed not only to optimize the solution, but also to obtain a technological base for making similar changes in the future. The project passed from start to finish without a single delay. We can say that the task was completed with 100%.
DFG152 is now licensed by FSTEC (Russia’s Federal Service for Technology and Export Control)
MASTERDATA Company is proud to announce successful completion of the certification process for the DFG152 software and obtaining a FSTEC Certificate. This certificate в„–3766 was issued June 30, 2017 on the results of successfully passed certification tests conducted by the testing laboratory Echelon NPO CJSC.
The certificate states that DFG152 solution developed by the MASTERDATA Company in accordance with the specifications RU.81363339.501410.001 TU meets the requirements of the document entitled В«Protection against unauthorized access to information Part 1. Software protection information. Classification by the level of control of absence undeclared -bath optionsВ» by the security level of 4 when implementing the operating instructions.
Successful certification by FSTEC is an indicator of reliability of the DFG152 software and gives the opportunity to actively work with confidential information and personal data.
Personal data protection
Within the cloud
About FL 152
Official Platinum Partner and Reseller of Salesforce in Russia and CIS countries
DFG152 consists of 3 components:
A Reverse-Proxy module, that tracks process operation with personal data (can be replaced with a plugin)
A service for data storage and depersonalizing
Salesforce Managed Package, responsible for the DFG152 validation process from Salesforce
- License of FSTEC of Russia for activity on development and production of confidential information protection means
- License of FSTEC of Russia for activity on technical protection of confidential information
- License of Federal Security Service for activities related to the use of encryption (cryptographic) means
- License for provision of data transmission services
- License for provision of communication services / granting communication channels
- License for provision of telematic services
- Certificate of compliance with PCIDSS safety requirements
- Certificates of compliance with ISO / IEC 27001 safety requirements
Documentation development in full compliance with the requirements of the state regulatory bodies in the field of personal data and its protection;
Readiness for Roskomnadzor inspection