Companies propose finalizing bill on criminal liability for leaks

On December 4, a group of senators and deputies headed by the head of the State Duma Committee on Information and Communications Policy submitted to the State Duma a bill introducing criminal liability for illegal collection, use and transfer of personal data, including leaks. and IT, Alexander Khinshtein.

The members of the association supported the innovations, but emphasized that the composition introduced in the Criminal Code must be unambiguous and the responsibility must fall on hackers and those who sell databases. For now, the composition is “formal,” the letter notes, and sanctions are provided for the collection and storage of data, regardless of the presence of intent.

Representatives of the DBA proposed adding to the wording a punishment “for the obviously illegal collection, storage and use of personal data.” The businessmen also proposed not holding responsible employees of information security departments or specialized institutions that study leaks “to monitor security and prevent attacks on their own information resources.”

• In Russia, fines for personal data leaks will increase up to 10 times; the maximum amount will increase to 1.5 million rubles. These amendments to Russian legislation were supported by the government in November 2023. The fine for violation will be up to 15 thousand rubles for citizens instead of the current 6-10 thousand, for officials – up to 300 thousand instead of 20 -40 thousand, for legal entities – up to 500 thousand instead of 30-150 thousand. In case of repeat offenses, the maximum fines will increase, respectively, to 30,500,000 and 1.5 million rubles.