Bills on strengthening responsibility for leakage of personal data submitted to the State Duma

Two bills developed by the Ministry of Digital Development since the beginning of 2022 have been submitted to the relevant committee of the State Duma. The first document provides for tougher administrative liability of companies for leaks of personal data, including turnover fines. The second bill amends the Criminal Code of the Russian Federation and establishes criminal liability for theft, sale and distribution of personal data.

Experts warn of a possible increase in prices for the services of telecom operators, online services and other companies related to data processing, in connection with the introduction of new rules. Also, market participants warn of a possible increase in prices for insider information distributed on the darknet in the event of criminal liability.

The head of the Ministry of Digital Development Maksut Shadayev said that the bill on strengthening administrative responsibility for data leaks is already ready in the final version and should be submitted to the State Duma in April. The bill provides for turnover fines for companies that have leaked information in the amount of 5–500 million rubles.

In April, it is also planned to consider a bill criminalizing the theft of personal data and the creation of websites and other channels for their distribution. The introduction of amendments to the Criminal Code of the Russian Federation concerns illegal access to computer information, distribution of malicious programs and violation of the rules for the operation of means of storing, processing or transmitting computer information.