Skip to main content

Personal Data Protection Law in Russia: The Law Came into Force on September 1, 2015

This newsletter is relevant to all companies who deal with the data of citizens of the Russian Federation.

We would like to notify you that on September 1st 2015 amendments to the Federal Law "On Personal Data” will come into force. They state that, with regards to the collection of personal data from citizens of the Russian Federation (including collection through the information and telecommunications network known as the "Internet"), any company that handles personal data must take responsibility for the recording, systematization, accumulation, storage, clarification (updating/changing) and extraction of such data, using databases which are kept only on the territory of the Russian Federation.

Exceptions to this rule are cases where personal data is transferred in accordance with international agreements, for the delivery of justice, for the running of state and municipal services, as well as (with certain restrictions) for the purpose of journalistic, literary, scientific or other creative activities.

This law applies to personal data, thus to any information directly or indirectly related to an individual (such as surname, first name, middle name, passport data, biometrics, registration address, education, political beliefs, etc.) In practice, this means that the law applies to all organizations operating in the Russian Federation.

Violation of this law may lead to the head of the organization involved being held administratively and, in some cases, criminally responsible, along with the person who was responsible for the storage of the data. Additionally, a person whose rights have been violated may demand compensation for damage caused in the context of civil proceedings.

By September 1, 2015 companies that process (operate) or intend to process (operate) personal data must notify Roskomnadzor of this and provide information on the location of servers that contain databases of the personal data of citizens of the Russian Federation.

To help your company avoid risks Accountor is ready to assist you with the following services:

  • Analysis of the scale of personal data storage in your company
  • Creation of a set of documents which are required in order to store personal data in Russia
  • Registration of your organization in Roskomnadzor as a data operator