The Ministry of Digital Development of the Russian Federation reported that the Russian government has supported the ministry's initiative regarding compensation payments to victims of personal data breaches under the law on turnover fines.
As explained by the ministry, if a company that has allowed a data leak compensates the user for damages, then reduced turnover fines will be applied to it.
The compensation mechanism will look like this. The company informs the user about the leak of their data and expresses its agreement to compensate for the damage incurred. This information is also posted on the Gosuslugi portal.
Within 15 working days, the user has the right to apply through the Gosuslugi portal for compensation. The next 20 days are allocated for the company to process applications and calculate the amount of payments.
Within a similar period, the user must accept or reject the offer. It is emphasized that if more than 80% of users affected by the leak agree to receive payments, the company must make them within 5 working days.
