According to data from Roskomnadzor, in 2024, there were 135 cases of database leaks containing information on more than 710 million records of Russian citizens. This information was reported by the RIA Novosti agency, detailing the department’s findings.
In a bid to combat the increasing threat of data leaks in the face of rising cyber attacks, in November 2024, the President of Russia signed laws to bolster the consequences for leaks and illegal circulation of personal data. These new laws include a combination of administrative and criminal measures aimed at curbing the spread of leaked data.
Under the new regulations, administrative fines will vary depending on the amount of data leaked. Fines for leaks ranging from 1,000 to 10,000 subjects can go up to 5 million rubles, while leaks involving 10,000 to 100,000 subjects or 100,000 to 1 million identifiers can result in fines up to 10 million rubles. For leaks exceeding 100,000 subjects or 1 million identifiers, fines can range from 20 million to 500 million rubles, or up to 3% of the company’s annual revenue.
For leaks of data from special categories, fines can go up to 15 million rubles, with repeat offenses potentially resulting in fines up to 3% of revenue, but not less than 25 million rubles. Operators are also mandated to inform regulatory authorities promptly about their plans for processing personal data, with violations punishable by fines of up to 300 thousand rubles for legal entities.
Additionally, fines for the unlawful or accidental transfer of data range from 50 thousand rubles for individuals to 3 million rubles for organizations. The legislation also establishes liability for entities that refuse to enter contracts with consumers who decline to provide biometric data.
Furthermore, a new article introduces penalties for the illegal use of personal data. Offenders may face fines of up to 300 thousand rubles or their annual income, with more severe cases potentially leading to a maximum of 10 years in prison, particularly in instances of cross-border leaks resulting in serious consequences.