Press Center

Since the beginning of 2025, Russian courts have issued several landmark rulings in the field of personal data processing. These cases affect the interests of banks, marketplaces, solid waste management operators, employers, and online platforms. Some positions confirm long-standing approaches (withdrawal of consent does not terminate processing where a contract or legal obligation exists), while others establish new guidelines for businesses (processing of a beneficiary's data without consent, inadmissibility of contacting a previous employer without the candidate's permission).

Our review covers seven recent cases with conclusions that will help DPOs, legal teams, and information security departments minimize risks and establish compliant processes.

On April 24, 2026, the First All-Russian Conference of Young Specialists "LAW_EXPO" was held at St. Petersburg State University. The event brought together scholars, leading expert practitioners, and early-career researchers for a comprehensive analysis of key issues in information law.

Alina Smakova, an associate in the Data Protection & Technology practice at Lidings, took part in the conference.

April 9^th,2026 annual conference Pharmaceuticals – 2026: Legal Issues will take place in Moscow organized by Pravo.ru. Lidings lawyers take an active part in the event’s program.

As a strategic partner of the conference, we aimed to make the program rich and actual. Together with pharmaceutical industry experts and lawyers, we will discuss how the market has changed in 2025 and what awaits us in 2026.

The Federal Service for Technical and Export Control (hereinafter referred to as the "FSTEC") has prepared a draft methodological document "Activities and measures to protect information contained in Information Systems" (hereinafter referred to as the "Draft Methodological Document").

We suggest to review the changes in the legislation on the safety of Critical Information Infrastructure (CII), which entered into force in 2025, as well as new initiatives that are planned to be considered and/or come into force in 2026.

Lidings held a series of webinars dedicated to the practical aspects of complying with the legislation on Critical Information Infrastructure (CII) security. 

Alina Smakova, Lidings associate specializing in personal data protection issues, will speak on the topic "Cross-Border Transfer of Personal Data: Building Bridges, Not Walls. Organizing Legal Cross-Border Data Flows".

On 14 July 2025, the Council of the State Duma began reviewing Draft Law No. 951518-8 “On Amendments to Article 12 of the Federal Law ‘On Personal Data’” (hereinafter referred to as the “Draft Law”).

Overview of changes in the sphere of information security and personal data (hereinafter referred to as the “PD”) that will affect the activities of organizations involved in the wholesale and retail trade of medicinal products. We remind you that starting from September 1, 2025, consents for PD processing must be stand-alone documents, separate from website Privacy Policies

On September 1, 2025, Federal Law No. 150-FZ dated June 7, 2025, 'On Amendments to Certain Legislative Acts of the Russian Federation' (hereinafter referred to as 'Federal Law No. 150'), will come into force, introducing a number of changes affecting the regulation of dietary supplements.