On March 01, 2021, the amendment modifying the Federal Law “On Personal Data” has come into force.
The State Duma adopted the Amendment on December 23, 2020, a law on additional protection of personal data of Russians.
Key features of the Act are:
- Consent to data processing can be given directly to the operator of personal data or through the special information system of Roskomnadzor. Obtaining consent to the dissemination of the data “by default” is not allowed.
- Operators are required to delete personal data at the first request of users.
- In the event that personal data was disclosed to an indefinite circle of persons due to an offense, crime or force majeure circumstances, the obligation to provide evidence of the legality of the subsequent dissemination or other processing of such personal data lies with each person who disseminated or otherwise processed them.
- Concept of “personal data made publicly available by the personal data subject” has been removed and alongwith the article that previously allowed anyone to process such data without the consent of the data subject.