The Ministry of Digital Development has included in the "Antifraud 3.0" package (legislative measures to combat telephone and cyber fraud) the launch of a platform for managing citizens' consent to the collection and processing of personal data. The law is scheduled to come into force on March 1, 2028.

The initiative of the Russian Ministry of Digital Development is that all 2.6 million personal data operators should transfer information about received consents to a special platform. Russians will see them "in one window" and, if necessary, will be able to revoke them, KommersantЪ writes.

The Central Bank and the Ministry of Economic Development opposed this approach. The regulator believes that a full-fledged information resource with consents should first be created, and then requirements for businesses should be introduced. The Ministry of Economic Development explained that changes in personal data processing need to be carefully considered. Currently, the platform for their accounting has been launched in pilot mode and the results are not yet known, the agency added.

The Russian Ministry of Digital Development reminded that "Antifraud 3.0" is at the discussion stage. The final version of the document has not yet been approved.

What experts say

The Big Data Association (which includes Sber, Yandex, VTB, Avito, etc.) stated that only large businesses can connect to the Unified Identification and Authentication System (ESIA) with high information protection requirements. In addition, the process of transferring billions of records of consent to data processing will be associated with huge costs. However, as the association emphasizes, this can create additional risks of confidential information leakage.

Igor Bederov, Chairman of the Council for Counteracting Technological Offenses of the KS NSB, noted that it is very difficult to digitize consents received several years ago on paper. In his opinion, a unified technical protocol for working with consents needs to be developed. The industry itself needs a transition period of about one and a half years before the introduction of new rules.