Russia's legislation evolves rapidly and its personal data
laws are no exception. On 27 March 2021 Russia enhanced personal
data subjects' rights by changing fines and extending the
limitation period for data-related breaches.
No changes to fines for data localisation breaches
The Federal Law on Amendments to the Code of Administrative
Offences (19-ФЗ, 24 February 2021) amends the amount of
administrative fines prescribed by Article 13(11) of the Code of
Administrative Offences for Several Types of Offences Against the
Federal Law On Personal Data (152-ФЗ, 27 July 2006).
The fines may apply to legal entities and their responsible
managers (eg, CEOs and data protection officers) on a case-by-case
basis.
