Protection of personal data under Federal Law No. 152, Federal Law No. 149 and the legislation of Kazakhstan
Audit and development of a complete set of documents for organizations that operate personal data.
New requirements for the processing of personal data
Since 2023, new legal requirements for the processing of personal data have entered into force.
Acsour lawyers will prepare all documents in full compliance with the current legal requirements of the Russian Federation and the Republic of Kazakhstan.
We will develop a complete set of documents or bring into compliance a personal data protection system to reduce the risks of fines.
Acsour Personal Data Protection
  • Audit of compliance with legislation
    Audit of personal data processing processes and information systems for compliance with the requirements of personal data processing and development of recommendations for the elimination of inconsistencies.
  • Comprehensive preparation of documents
    Lawyers will prepare a complete package of necessary documents (policies, templates, internal documents) in accordance with the new requirements of the legislation of the Russian Federation.
  • Hourly legal advice
    As part of the hourly consulting, Acsour lawyers can advise you on any issues related to the processing of personal data in Russia and in other countries.
Important to know
  • Who is the operator?
    The vast majority of legal entities are personal data operators, as they collect and process personal data of employees, contractors and individual clients.
  • Responsibility for violations in the Russian Federation
    Violation of legislation in the field of personal data protection can lead to serious consequences. In accordance with Article 13.11 of the Administrative Code of the Russian Federation, fines are provided for legal entities up to 18 million rubles.
  • Responsibility for violations in the Republic of Kazakhstan
    Illegal actions with personal data can lead to a fine from 229,725 tenge to 3,063,000 tenge (Article 79 of the Administrative Code of the Republic of Kazakhstan). Violations of the confidentiality of personal information can be punishable by imprisonment for up to seven years (Article 147 of the Criminal Code of the Republic of Kazakhstan).
  • Individual approach
    We offer an individual approach to the protection of clients' personal data, analyzing the scope of their activities and the specifics of the company to determine the optimal security measures and necessary services.
  • Confidentiality of information
    In accordance with the law "On Personal Data", we will help not only reduce the risks of fines, but also ensure the protection of confidential client information, preventing possible security threats and preserving the company’s reputation.
By contacting us, you will receive professional help and expert support. We offer a wide range of services, including analysis and development of security measures, employee training, audit of the data protection system and much more. Our goal is to provide complete and reliable protection of your personal data so that you can focus on your business without worrying about possible threats.

Do you doubt the correctness of your personal data processing system?
Fill out the form and find out what is necessary to bring your system into compliance with the legislation.
Services for compliance with the requirements of Federal Law No. 152 "On Personal Data"
  • Reducing risks
    audit and preparation of documentation under Federal Law No. 152, taking into account new requirements
  • TOP 5 "Pravo-300"
    Acsour is among the leaders of the regional ranking
  • ISO 27001
    compliance with the international standard in the field of information security

Questions about the processing of personal data

  • Question:
    What is the amount of fines for violation of the law in the field of protection of PD?
    Answer:
    For different types of violations, different fines are provided. So fines from 30 thousand to 18 million rubles can be imposed on a company in Russia.
  • Question:
    Which companies are recognized as PD processing operators?
    Answer:
    The operator of personal data is a company that receives and processes personal information, and also has goals and a list of actions with the data provided.
  • Question:
    What is recognized as personal data?
    Answer:
    Any information about an individual that allows you to identify him. There is no specific list of data in the law.
  • Question:
    Does a company dealing with PD processing need to submit an application to Roskomnadzor?
    Answer:
    From September 1, 2022, the processing of personal data by operators without notifying Roskomnadzor is allowed only in certain cases listed in paragraph 2 of Article 22 of the Federal Law "On Personal Data":
    —Personal data is included in the state information systems created to protect the security of the state and public order (the Ministry of Internal Affairs and other law enforcement agencies);
    —PD processing activities are carried out without the use of automation tools (for example, only a paper log of visitors is kept);
    —PD is processed for the safety of transport and transport facilities. In all other cases, companies are required to submit a notification to Roskomnadzor.
  • Question:
    Do foreign companies need to comply with the requirements of Russian legislation on the processing of PD?
    Answer:

    Yes, foreign companies are required to comply with the requirements of Russian legislation on the processing of personal data if they collect, process and store personal data of citizens of the Russian Federation.

  • Question:
    If a company has a website, does it need to post a privacy policy on it?
    Answer:

    Yes, if your company collects personal data of its visitors through the site. For example, the site may have forms for subscribing to a newsletter, registering a personal account, applying for or receiving feedback, or an online chat system or an online consultant.

Be aware of changes in legislation

Subscribe to the monthly Acsour Review

You consent to the use of cookies, using our website. It ensures the correct operation of the website and helps us to improve it.

ОК