Beginning March 1, 2021, Russia will impose restrictions on the processing of personal data publicly available on the internet and offline. The legislative changes are aimed at fighting the uncontrolled dissemination of personal information.
Under current law “On Personal Data” any data operator (the Russian equivalent of the term controller) may process personal data if the data subject made it publicly accessible or instructed another person to do so. There is no need to ground the processing on legitimate interests, the performance of a contract, data subject’s consent or other common lawful bases. When “Amendments to the Federal Law on Personal Data” No.519-ФЗ dated Dec. 30, 2020, goes into effect, this rule and the term publicly accessible data will disappear.