On the 24th of May 2022 State Duma approved in the first reading a draft law No. 101234-8 “On amendments to the Federal Law “On personal data” and other legislative acts of Russian Federation on the matters of protection of personal data subjects” (the Draft). The Draft was created in order to increase the protection of privacy of the subject of personal data.

On April 26, 2022 the Federation Council approved a law amending Article 16 of the Law of the Russian Federation of February 7, 1992 № 2300-I “On Protection of Consumer Rights”, which prohibits sellers, performers, owners of aggregators to refuse a consumer in contract, execution, modification or termination due to the refusal of the consumer to provide personal data.

In a Resolution dated May 25, 2021, when examining the complaint of MedReyting LLC, the Constitutional Court of the Russian Federation clarified the procedure for applying para. 8, part 1, art. 6 of the Federal Law "On Personal Data", according to which the processing of personal data is necessary for the professional activity of a journalist and (or) the legitimate activity of the mass media or scientific, literary or other creative activities, provided that the rights and legitimate interests of the subject of personal data are not violated.

Currently the Draft Law No. 992331-7 is considered by the Russian Federation State Duma. Perhaps it is the most anticipated document in the field of personal data since the proposed changes in 152-FZ are designed to reduce the number of pain points for both operators and consultants in the information protection sphere.

At the end of 2019, Federal Law No. 405-FZ entered into force. This act has significantly increased administrative liability for violations of the requirements on the localization of databases containing personal data of Russian nationals. We already wrote about this amendment earlier.

On December 2, 2019, Federal Law No. 405-FZ entered into force. This act significantly increases administrative liability for violations of the requirements on the localization of databases containing personal data of Russian nationals. The localization requirement was first introduced into the Russian legislation in 2014 and imposed an obligation to locate servers with the personal data of Russian nationals only in the territory of the Russian Federation.