Data Localization in Russia: Now Backed with Big Fines

Until recently, Russian legislation did not include administrative sanctions for companies who violate data protection requirements.

However, new legislation introduced will propose fines for first offenses between $30,000 – $90,000. Repeated offenses may be punishable by fines between $90,000 – $280,000. Data protection requirements were introduced in 2015 in the Russian Law on Personal Data. The requirements call for mandatory obligation for all operators of personal data to ensure the safe recording, systematization, accumulation, storage, amendment and extraction of personal data for Russian citizens.