Roskomnadzor (RKN) strongly recommends that businesses report cases of personal data leaks. This was stated by the Deputy Head of RKN, Milosh Wagner, at a press conference.
From May 30, 2025, new regulations will come into force that will significantly tighten the responsibility for companies. Currently, under the existing legislation, companies do not face fines for failing to report data leaks.
Wagner noted that the moment of the offense will be considered the confirmation of the leak, for example, if the database becomes available to attackers. He emphasized that companies have until May 30 to notify the authorized bodies about the incidents that have occurred. Otherwise, after the new regulations come into force, failure to report leaks will also be considered an offense.
Thus, businesses should be proactive and transparent to avoid serious financial consequences.
Read more on the topic:
Almost all economically active population covered by data leaks