Roskomnadzor proposed to legislatively restrict the collection of personal data

All participants in the circulation of such data must comply with the rules. The initiative is currently in the proposal stage.

The RKN representative explained that organizations will only be allowed to collect data that is truly necessary to solve certain problems. They also plan to tighten the collection format: it will only be possible on the basis of the law (currently data can be collected with the consent of the citizen). Organizations may receive data from authorized bodies.

Roskomnadzor explained that now personal data is often collected “just in case”, without a clear purpose for its further use. The operator of personal data is the one who processes it. In Russia, these are about 5 million legal entities, including individual entrepreneurs, as previously reported by the head of the State Duma Committee on Information Policy, Alexander Khinshtein. According to him, not everyone can provide their protection.

Privacy Advocates founder Alexey Muntyan believes the initiative may generate resistance from companies. He believes that the new restrictions will make working with data more difficult and will negatively affect income and development. At the same time, the proposal to develop standards, according to Muntyan, is an important step towards improving the protection of personal data in Russia, where flexible legal norms are currently lacking.

Russia is scheduled to adopt a bill that will introduce fines for the leakage of personal information starting in 2024. At the same time, the entry into force of the document may be delayed depending on the company’s readiness for regulation.

According to the results of the first half of 2024, 986 million lines of personal data were leaked online in Russia. This is 33.8% more than in the first half of 2023.