New Requirements For Notice Of Data Processing

On August 22nd 2017, the Russian data protection authority, Rozcomnadzor, issued an order revising notice requirements for companies processing personal data.

The order requires companies to give advance notice of personal data processing. The notice must include:

1. Information on security measures used to prevent data breaches;
2. Intention to transfer data out of Russia, and to which countries;
3. Confirmation of compliance with law requiring the data of Russian citizens to be stored on servers located within Russia.

A new notification form is available for companies to provide notifications to Rozcomnadzor.

Download: Data Protection Update: UK, Canada and Russia

Originally published 15 September 2017