The President has signed a law* introducing fines for the breach of personal data localisation rules. The law is effective from 2 December 2019.
The law provides for fines ranging from RUB 1m (EUR 14,000) to RUB 6m (EUR 84,000) for failure to comply with localisation rules. In case of repeat violations, the fines will range from RUB 6m (EUR 84,000) to RUB 18m (EUR 252,000).
In addition, the law introduces fines for repeated violations of established internet rules by certain types of businesses as previously reported.
Companies are advised to check and ensure that their current business processes comply with all legal requirements, since the potential financial exposure for non-compliance has significantly increased.
If you have any questions on this eAlert, do not hesitate to contact CMS Russia experts Anton Bankovskiy and Vladislav Eltovskiy or your regular contact at CMS Russia.
* In Russian