Current Russian legislation establishes a number of responsibilities for personal data operators (that is, persons that process personal data as well as determine the purposes, composition and type of personal data processing operations), including the responsibility to make sure that personal data is processed using data bases located in the Russian Federation, except as provided by law (Art. 18, Part 2 of Russian Federal Law No. 152-FZ of 27 July 2006 On Personal Data (the “Federal Law”).
A bill to amend the Federal Law and other regulations was signed into law and published on 28 February 2025.
The original amendments sought to regulate the processing of certain personal data categories, such as personal data of public officials, judges, parties to criminal proceedings, and other persons defined by law.
An additional amendment suggested in the second reading also made it to the final bill.
A bill to amend the Federal Law and other regulations was signed into law and published on 28 February 2025.
The original amendments sought to regulate the processing of certain personal data categories, such as personal data of public officials, judges, parties to criminal proceedings, and other persons defined by law.
An additional amendment suggested in the second reading also made it to the final bill.