Roskomnadzor Given Increased Powers To Conduct Data Processing Audits Of Online Companies

As a result of the recent implementation of Decree No. 327, Russia's data protection authority – the Roskomnadzor – now has greater authority to conduct audits of online companies to monitor their handling of user data. Decree No. 327, adopted in April, introduces compliance audit rules which apply to all online organisers of information distribution, and provides the Roskomnadzor with increased supervisory powers.

The Decree enables the Roskomnadzor to check how online businesses process, store and transmit text, voice and other electronic messages of Internet users, and how organisers of information distribution, process, store and transmit information about Internet users. These new capabilities are designed to assist the Roskomnadzor in protecting the legitimate rights of the users by ensuring data protection requirements are met.