The State Duma in the third reading passed a bill providing for the imposition of administrative liability for violation of the rules of localization of personal data (hereinafter – PD). Now the amount of the fine may amount up to 18 million rubles. It should be noted that earlier the legislation did not provide for a particular administrative punishment for violations in the field of localization of PD.
We would like to start this matter with a reminder that the requirement for localization of PD in its collection is to ensure the recording, systematization, accumulation, storage, rectification and extraction of such PD using databases located in the territory of the Russian Federation. According to the amendments incorporated in the Administrative Violations Code of the Russian Federation, fines for such violations will amount to:
Among other issues, the administration bill provides for the imposition of fines for repeated violations of particular provisions of the Federal law dated 27/7/2006 No. 149 “On Information, Information Technologies and the Protection of Information” relating to:
Indicated requirement applies not only to Russian companies, but also to foreign organizations that do not have a physical presence in Russia, if its activities are directed at the territory of Russia.
The following circumstances may indicate the presence of the orientation of the website on the territory of the Russian Federation:
Failure to localize bases with personal data creates a threat to the security of citizens, to the functioning of critical information infrastructure, interferes with the effective fight against terrorism and extremism.
In the matters of application of legislation in the sphere of personal data, please contact specialists of Acsour Legal Department.