In your experience, do companies in the Russian Federation need
to do more to fully understand their data privacy and protection
duties in the digital age?
Data privacy and protection has become one of the most discussed
topics in the information technology (IT) sector in recent years.
In the digital age, amid evolving data privacy laws, companies,
including those operating in Russia, as well as foreign investors,
should carefully assess their data protection strategies and
achieve data privacy compliance to mitigate the associated risks.
However, not all of them are fully aware of their rights and
obligations in this particular area, especially their
confidentiality duties, required security measures, data transfer
rules and the ‘localisation’ requirement, when
processing personal data online or offline. Indeed, this might be a
big challenge for them following the imposition of tougher
sanctions for data breaches on a local and global level. More
specifically, I am
