Bills Adopted Tightening Liability for Offences Related to Personal Data Processing
On November 27, the Federation Council approved a package of bills (Bill No. 502104-8 and Bill No. 502113-8) adopted in three readings by the State Duma the day before. The bills provide for significantly tougher liability for offences related to the processing of personal data.

E.g., administrative fines of up to RUB 15 million for personal data breach (up to RUB 20 million for biometrics breach) and turnover fines of up to 3% of total revenue (which cannot exceed RUB 500 million) for repeated breach are introduced. It will be a criminal offence to illegally store/collect/transmit any illegally obtained personal data. The sanctions include imprisonment of up to 10 years.

Read also
03/4/2026
On February 19, 2026, our firm hosted “Private Thursday,” organized by the Civil Law Club and dedicated to compensation for losses as a form of warranty obligation in Russian law.
03/2/2026
The analytical portal Pravo.ru published an article reviewing the opinion issued by the Advocate General of the Court of Justice of the European Union regarding the prohibitive provision of the EU regulation.