Personal Data Legislation in Russia

Abstract

Russia’s Personal Data law may be only 6 years and a few months old, but as Tatiana Egorova demonstrates, extracting substantial parts of the relevant legislation, it is already a significant body of law. This article will be of particular interest to those working with the Russian aviation, banking and telecoms sectors. Until a few years ago Personal Data legislation did not exist in Russia, however in the last 6 years there have been significant changes in legislation. The Federal Law of July 27, 2006 N. 152-FZ “On Personal Data” that regulates personal data issues entered into force on January 29, 2007. The Law has since been considerably changed by amendments that came into force in July 2011, and the latest amendments were introduced in April 2013. Information systems should have been technically adjusted to be in compliance with the Law starting July 2011. Almost all Russian legal entities find it hard to comply with Personal Data legislation requirements. Supervision standards imposed by regulatory bodies are very strict, while implementation of all legislation requirements is a long-term money consuming project, thus causing some legal entities to postpone its introduction.