Reform of personal data legislation in Russia: practical aspects and enforcement trends

On 1 September 2022 a new bill amending the Russian legislation on personal data will come into force and on 1 March 2023 new rules for cross-border data transfer will also become applicable. Updated regulation entails the need to rethink personal data processing activities in the company and to implement compliance measures timely in accordance with introduced requirements for personal data processing and responsibilities for controllers and processors.

At the same time, the regulator now pays more careful attention to compliance of international companies with Russian legislation, including localization requirements, data security and confidentiality obligations as well as obligations to delete unlawful information.

We will provide an overview of the key changes in personal data regulation, as well as practical recommendations and compliance deadlines for business. Our legal experts will cover the following topics:

• Territorial scope of the Federal Law on Personal Data

• Rules for cross-border data transfer

• Restrictions in “data controller – data processor” interaction

• Safeguards for data subjects

• Data breach notifications and interaction with the State control system on computer attacks

• Responsibilities on cybersecurity and data protection under the Presidential Decree No. 250

• Enforcement trends: focus on localization, data breaches and deletion of unlawful information

Time of the webinar: 17pm - 18pm (Moscow time).

Our webinar will be useful to a wide range of specialists from international companies which have business operations in Russia.

We also invite you to ask your questions in advance and during the webinar.

Please send your questions in advance of the webinar to our marketing manager Olga Smirnova (osmirnova@alrud.com).

We sincerely hope you will join our webinar!