The Ministry of Digital Development and the Ministry of Justice of the Russian Federation, together with other departments, are preparing amendments to the draft law increasing fines for companies for leaking personal data of citizens. It is expected that the punishment may be mitigated under certain conditions.
Among the conditions is the annual expenditure of companies on improving information security. In the event of a leak, the operator must pay compensation to the subject of personal data. In addition, the company must confirm that it complies with the requirements for the protection of Russian data.
Earlier, State Duma deputies adopted in the first reading draft laws that tighten administrative liability for companies for leaks. We are talking about hundreds of millions of rubles for legal entities, and for thieves of confidential information - up to 10 years in prison.
Read also on the topic:
Вагнер рассказал о крупной утечке личных данных россиян
DLBI: за 6 месяцев 2023 года в Сеть утекли данные 188,7 млн клиентских записей россиян