A law increasing administrative liability for personal data leaks was signed on 30 November 20241 (No. 420-FZ) (the "Law"). The Law will enter into force on 30 May 2025.
A new article of the Criminal Code of the Russian Federation also enters into force on 11 December 2024. It establishes liability for the illegal use and/or transfer, collection and/or storage of information on computers that contains personal data.
1Under the Russian personal data law, personal data leaks are understood to mean the illegal or accidental transfer of (the provision, dissemination of, granting of Access to) personal data which led to the infringement of the rights of personal data subjects.
You can download the newsletter “Unprecedented increase in liability for personal data leaks” in English and Russian by clicking on "Download associated files".
