On 02 December 2019, Russia put into effect a new law
introducing hefty fines for non-compliance with the personal data
localization requirement. The law may affect international and
local companies who fail to process Russian nationals' data in
certain ways within the borders of that country.
How much?
The localization requirement was established in September 2015.
At that time, Russia did not accompany that requirement with any
monetary liability except for a modest fine of approx. USD 80 for
not informing the Data Protection Authority (Roscomnadzor) about
the physical address of the databases containing personal data of
Russian Federation nationals (the Russian Data).
The businesses were supposed to ensure their compliance with the
localization requirement during four previous years, but many of
them have put this cost-consuming task on the back burner. This
year, they will likely find a lump of coal in their Christmas
stockings. In particular, new Para 8 and
