11 May 2021
Russian President Vladimir Putin instructed the government to accelerate work aimed at amending legislation in order to strengthen the protection of personal data of Russians and to promote the development of Russian organizations.
“The government … to speed up the preparation and introduction of amendments to the federal law” On Personal Data “aimed at strengthening the protection of personal data of citizens, as well as at promoting the development of Russian organizations developing software and hardware and software systems,” the instruction says.
2 Mar 2021
The Russian State Duma has adopted in the third reading the draft law that proposes to stiffen penalties for violation of rules applicable to personal data processing in Russia, as established by Federal Law No. FZ “On Personal Data”. The fine for first time violators could reach up to RUB 6. Repeated violations of the data localization law can incur increasing fines with a maximum penalty of RUB 18 million for legal entities.
The main legal requirement is to store the information about Russian users must be stored in the territory of the Russian Federation. On December 2, 2019, President Vladimir Putin signed Federal Law No. 405-FZ, On the Introduction of Amendments to the Administrative Offenses Code of the Russian Federation. As of December 13, 2019, the Code has introduced new constituent element of an administrative offense – breach of localization requirements.
Failure by an operator to comply with the requirement leads to increased fines:
for officials – up to RUB 200,000 (approximately US$3,350)
for legal entities – up to RUB 6,000,000 (approximately US$100,000)
For repeated violation:
for officials – up to RUB 800,000 (approximately US$13,350)
for legal entities – up to RUB 18,000,000 (approximately US$ 300,000)