Crucial upgrading of penalties for violation of personal data law

On December 2, new amendments to the Code of Administrative Offenses of the Russian Federation entered into force. In brief, a separate penalty for non-compliance with the rules on the storage, recording, systematization, clarification or extraction of personal data of Russian citizens in the territory of the Russian Federation was added.

For violation of the rules, companies now face liability in the form of an administrative fine in the amount of 1 to 6 million rubles for legal entities and from 100 000 to  200 000 rubles for officials.

In case of repeated violation, the amount of liability increases: for legal entities - from 6 to 18 million, for officials - from 500 000 to 800 000 rubles.