The Ministry of Digital Development has developed a bill that tightens the rules for collecting and processing personal data of Russians. The goal of the initiative is to limit the collection of excessive information and reduce the risk of leaks of confidential information. This was announced by Evgeny Khasin, Acting Director of the Department for Cybersecurity at the Ministry of Digital Development, at the press conference "Cybersecurity: Challenges and Steps to Combat Threats."
The amendments enshrine the principle of minimizing the data collected, which is already enshrined in legislation but often violated in practice. According to Khasin, many organizations collect "just in case" extra information about customers for their own purposes, which increases the risk of data compromise.
Information containing personal data should not be processed in systems more than is necessary to ensure the business process
The bill is currently being discussed with federal authorities.
The Ministry of Digital Development has been in dialogue with businesses on minimizing data collection since 2023. Previously, Vladimir Bengin, Director of the Department for Cybersecurity, proposed using "data showcases", storing information only where it comes from, in order to reduce the risk of leaks.
Experts note the relevance of the initiative. According to Solar Aura, from January to August 2025, about 13 billion lines of personal data of Russians leaked to the Internet - almost four times more than in the entire 2024. At the same time, even single large leaks significantly affect statistics and emphasize the need for strict regulation.