Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Russia: Duma announces amendments to Code of Administrative Offences and Criminal Code regarding liability for personal data breaches

On January 23, 2024, the State Parliament (Duma) announced that the Draft Federal Laws No. 502104-8 and No. 502113-8, amending the Code of Administrative Offences of the Russian Federation and the Criminal Code of the Russian Federation, respectively, passed the first reading before the Duma.

Draft Federal Law No. 502104-8 aims to increase the liability of companies in case of personal data breaches by introducing fines for unauthorized disclosures of personal data and for violating the obligation to notify the Federal Service for Supervision of Communications, Information Technology, and Mass Media (Roskomnadzor). The amount of the fine varies depending on the scale of the breach, type of the controller, and the category of the personal data.

Draft Federal Law No. 502113-8 sets out criminal liability, for the use, transfer, collection, and storage of personal data obtained illegally, as well as for the establishment of technical means that disseminate such data.

You can read the press release and access Draft Federal Laws No. 502104-8 and No. 502113-8 here, all only available in Russian.

Feedback