Obligation to provide personal data to Gosozero will increase burden on small businesses: experts

Experts believe that the new obligation will increase the burden on small and medium-sized businesses, since there are no ready-made tools to work with large amounts of data and depersonalize it.

The draft document states that authorities will be able to demand anonymized data from customers and employees for almost any reason, for example, if it is necessary to “protect the population and territories” in case of emergency, with the introduction of CTO, terrorist threats . , to prevent pandemics and poisonings, during quarantines. The project could come into force in September 2025.

Head of legal service at Identity Management Systems LLC (IDX) Mikhail Tevs says that we are talking about the implementation of crisis norms in legislation, with which the government, in a “catch-up” mode, will regulate the mechanisms created during the pandemic and during the military operation.

Tevs adds that the government is laying the legal foundations in the field of technological development, and more specifically in the field of the development of artificial intelligence technologies. According to the expert, it is difficult to question this public interest: the law and the draft order really exist and pursue legal and fair objectives. At the same time, the expert draws attention to the burden it places on small and medium-sized businesses.

“It is worth paying attention to the sufficiency and necessity of the measures taken, even if the mechanisms created do not excessively interfere with other government priorities, such as, for example, the development of small and medium-sized businesses. “We believe that the government should establish a mechanism by which the request and transfer of data to Gosozero does not become an unreasonable burden for small and medium-sized businesses,” the expert concluded.

I agree that “Gosozero” will require significant costs for companies, especially small and medium-sized ones that do not have large IT budgets. co-founder of the Banana Capital Fund holding company Dinar Faskhutdinov.

“Data anonymization requires expensive anonymization solutions, business process changes, and employee training. These costs can reduce the operational efficiency and competitiveness of companies, increasing the cost of doing business in Russia. There is also a risk of anonymizing data when comparing it with other sources, which can undermine trust in the system and scare away investors in the data and IT sector,” considers the expert.

Managing partner of the company “+7 Productions” Alexander Krivosheev He adds that this initiative will surely generate additional workload.

“The question is what? If the Ministry of Digital Development provides a work tool that allows depersonalization to be carried out quickly based on artificial intelligence and working with large amounts of data, then the burden will be minimal. But such a tool requires not only high efficiency, but also a certain degree of data information security. And, most importantly, if data disclosure occurs at the stage of transferring information to the GIS, who is responsible? – asks the expert.

If the company has already transferred the data to “depersonalization”, then it turns out that the service provider will be responsible, the question remains who it will be: the regulator itself or the accredited companies, the businessman argues.

Krivosheev suggests that, most likely, small businesses will have to increase the workload of their employees or purchase (develop) a plugin for the CRM system in order to immediately download an “impersonal” report. Such a “plug-in”, according to the expert, could be quickly implemented by software providers in the field of accounting and personnel, for example, “1C”, “Kontur”, “Tinkoff”; its resources are fully adequate for such a task. .

At the same time, creating a “gosozer” to store anonymized personal data can bring significant economic benefits, adds Faskhutdinov of Banana Capital Fund.

Among the positive aspects, the expert highlights centralized access to data, which will allow the State to respond more quickly to crises and improve planning in health care, infection control and other areas, which can reduce budget expenses. In the long term, Gosozero will contribute to improving the quality of social policy and the effectiveness of government programs, especially for monitoring demographic and economic processes, adds Faskhutdinov.

According to Faskhutdinov, blockchain could improve the manageability and security of the “gosozer”, as the distributed ledger records all data requests, making it possible to accurately track who and when accessed the information, ensuring transparency and business trust.

“Blockchain-based smart contracts could automatically verify data access conditions, minimizing the risk of data misuse. Decentralized storage reduces the risks of hacking and loss of information, protecting against a single point of failure,” says the specialist.

In some countries, blockchain helps automate the collection of data on cargo at the border, optimizing export-import operations and the transparency of tax collection, the expert gives an example. At the same time, the implementation of blockchain must be carried out as part of a single program developed in cooperation between the State and companies, and not be a one-time solution, otherwise the burden of responsibility will fall on one of the parties, says the expert. believe.