New Administrative Rules And Sanctions For Privacy Violations In Russia

Introduction

In Russia, the definition of "personal data" is rather broad. More specifically, any information (directly or indirectly) related to an identified or identifiable individual (data subject) is considered to be personal data (Article 3 of the Federal Law of July 27, 2006 No.52-FZ "On Personal Data" (as amended) ("PD Law")).

In general, the following pieces of information will qualify as personal data:

• name and surname,
• date and place of birth,
• residing and registration address,
• family, social and economic status,
• education, specialization and profession,
• phone number and e-mail.

Russian personal data landscape and legal regime are regulated mainly by the PD Law. Several times the PD Law has undergone certain changes and developments, including recently.