Personal Data Regulation from July 1, 2017
Regulation on personal data in Russia has more and more updates.
Personal data is any data by which you can identify an individual.
All issues related to personal data are regulated by the Federal Law No.152-FZ of 27.07.2006 On Personal data
From the 1st of July 2017 fines for violations of personal data regulations are dramatically increased. As well, types of violations have been expanded. Fines for legal entities are increased up to 75, 000 rubles and for entrepreneurs up to 20, 000 rubles.
Personal data regulation is related to each legal entity and entrepreneur, but not only to huge operators processing personal information. If even small company has web-site with application form where individuals fill in name and phone number, it should be registered in Roskomnadzor – official body which is responsible for Regulation on personal data.
Company should host on the web-site Corporate policy on Personal data processing. Otherwise, company will get a warning notice or fine. Fine for legal entity is from 15,000 to 30, 000 rubles and for CEO from 3, 000 to 6, 000 rubles.
Employers also should take into account regulation on personal data and must have all documents in order, such as Corporate Regulation on Personal Data and employees’ written consents to the processing of personal data.
Processing of personal data without written consents faces fines for legal entities from 15, 000 to 75, 000 rubles; for CEO from 10, 000 to 20, 000 rubles.