Russian banks criticized the draft law on access of intelligence services to personal data

In the summer, a bill was submitted to the State Duma according to which law enforcement agencies (such as the Russian Ministry of Defense, the FSB, the FSO, the Foreign Intelligence Service and the Ministry of the Interior) receive the right of access. information databases to edit or delete information about intelligence officers who are clients of one organization or another.

Although we are mainly talking about state and municipal bases, we also talk about the formation of a special registry of information systems where information from security forces must be processed.

Bank notes:

• Some provisions of the document contradict current legislation. We are talking about regimes for protecting legally protected secrets in the field of regulating the security of critical information infrastructure. The ADB also points out contradictions in compliance with the law regarding the fight against money laundering;
• Possible violation of the constitutional rights of citizens in connection with the provision of unrestricted access to data of persons who do not belong to the category of special services and who did not give consent to access such data. Under the bill, banks will have to provide access without a court order and without user consent;
• Banks will be forced to violate anti-money laundering laws. Now organizations must provide Rosfinmonitoring, upon request, with data on customer transactions. As the ADB points out, this process will be complicated if intelligence services begin to edit or delete data about their employees from their systems without notifying the banks;
• Technological risks for credit institutions. If information is entered incorrectly into the database, this can cause problems for the entire organization. There are also risks of transferring data to third parties;
• Difficulties in identifying clients in the event of deletion or editing of departmental affiliation data;
• Excessive powers of structures in the field of control over the processing of personal data of intelligence agents. The ADB believes that Roskomnadzor is responsible for this function;
• Higher costs and expenses for banks if the bill passes.

The members of the ADB are Alfa Bank, Sberbank, VTB, Tinkoff, Gazprombank and other large financial organizations. The ADB does not disclose the position of each bank separately.