The Ministry of Digital Development proposed to check the transfer of data of companies abroad without the knowledge of the RKN

The measure is supposed to affect all operators of personal data, including banks, telecommunications and IT companies, the total number of which in Russia exceeds 922,000 foreign computer systems, indicated in the document as information transmission channels.

Inspections will be carried out if the company has not agreed with the RKN on the transfer of information abroad two or more times a year. We are talking about personal data, payment documents, information on transfers within non-cash payments and on deposits from Russians, as specified in the explanatory note.

The Ministry of Digital Development told Kommersant that the initiative is aimed at preventing possible violations of citizens’ rights. “Risk activation” for a business does not indicate a violation, but “may serve as a reason for additional inspection,” the department said. It can also be carried out if the Russians request it appropriately, they added.

A representative of the operator T2 (formerly Tele2) told the newspaper that “the innovation will not fundamentally affect the company’s procedures,” since it transmits information in accordance with the law. Megafon reported that it does not transfer data abroad. MTS and Beeline declined to comment. The banks surveyed by the publication also did not comment on the Ministry of Digital Development’s proposal.

• In December 2023, a draft law on unscheduled inspections of companies following information leaks was submitted to the State Duma. So far, the document has not passed a single reading.