LAW
Fundamental provisions of data protection law can be found in
the Strasbourg Convention for the Protection of Individuals with
regard to Automatic Processing of Personal Data
("Convention") ratified by Russia in
2006 and the Russian Constitution establishing the right to privacy
of each individual (articles. 23 and 24). There is also specific
legislation, including the Data Protection Act No. 152 FZ dated 27
July 2006 ("DPA") and various regulatory
Acts adopted to implement the DPA as well as the Information,
Information Technologies and Information Protection Act No. 149 FZ
dated 27 July 2006 establishing basic rules as to the information
in general and its protection. In addition, the Russian Labour Code
contains provisions on the protection of employees' personal
data (Part XIV). Other laws may also contain data protection
provisions which implement the provisions of DPA in relation to
specific areas of state services or industries.
