Russia: Personal data violations bill requires “all organisations to be attentive” // Dataguidance.com

Ilya Goryachev and Sergey Medvedev, Senior Lawyers at Gorodissky & Partners, told DataGuidance, “The Bill falls within the Russian Government’s regulatory trend towards ensuring more effective compliance with the personal data legislation. Additionally, the ability of the Roskomnadzor to initiate administrative proceedings may result in increased enforcement [across] virtually all sectors. Starting with banks and ending with retail companies, all organisations will be required to be attentive to the regulatory environment.”

“Currently, the Code provides only for the violation of illegally gathering, storing, using or disseminating citizens’ information, with a maximum fine of RUB 10,000 (approx. €160),” Goryachev and Medvedev outlined. “The Bill [aims to] ensure that for specific types of personal data violations, different financial sanctions are applied and that the amount of the fines reflect international practice. In particular, the Explanatory Note cites [European] examples of sanctions greatly exceeding the Russian administrative fines.”