The State Duma of the Russian Federation has recently introduced a bill aimed at enhancing the protection of personal data of citizens, as announced by deputy Alexander Hinshtein in his Telegram message. The key point of the initiative is to ensure that consent for the processing of personal data is always treated as a separate and independent act.
Hinshtein pointed out that currently, banks, retail chains, and other market players often embed consent for data transfer and processing within the general contract. This practice often leads to confusion among individuals who may not fully grasp what they are agreeing to, particularly in e-commerce where consent is frequently obtained through a simple “checkmark”.
If the bill is approved, consent for personal data processing will need to be obtained separately from contracts and other forms of consent. This measure aims to empower individuals to make informed decisions regarding their data and provides them with the option to refuse consent if they so choose.
The proposed amendments will be incorporated into the federal laws “On Personal Data” and “On Protection of Consumer Rights”. Hinshtein emphasized that the new legislation will not only restore citizens’ right to control their own information but also mitigate the risks of data breaches and prevent misuse of data for illicit purposes.