The Ministry of Digital Development Proposes New Rules for Collecting and Processing Personal Data

The Ministry of Digital Development has developed a bill that tightens the rules for collecting and processing personal data of Russians. The goal of the initiative is to limit the collection of excessive information and reduce the risk of confidential information leaks. This was announced by Evgeny Khasin, acting director of the cybersecurity department of the Ministry of Digital Development, at the press conference "Cybersecurity: Challenges and Steps to Combat Threats."

The amendments enshrine the principle of minimizing the data collected, which is already enshrined in legislation but often violated in practice. According to Khasin, many organizations collect "just in case" extra information about customers for their own purposes, which increases the risk of data compromise.

The bill is currently being discussed with federal authorities.

The Ministry of Digital Development has been in dialogue with businesses on minimizing data collection since 2023. Previously, Vladimir Bengin, director of the cybersecurity department, proposed using "data showcases," storing information only where it comes from, to reduce the risk of leaks.

Experts note the relevance of the initiative. According to Solar Aura, from January to August 2025, about 13 billion lines of personal data of Russians leaked to the Internet - almost four times more than in the entire 2024. At the same time, even single large leaks significantly affect statistics and emphasize the need for strict regulation.

Read more on the topic:

• State Duma proposed to impose fines for repeated personal data leaks
• Ban on storing personal data abroad: new rules come into force in Russia
• Record number of personal data notifications: RKN is facing overload