Friend
Professional
- Messages
- 2,653
- Reaction score
- 850
- Points
- 113
The department is preparing new amendments to the law.
The Ministry of Digital Development and the Ministry of Justice of the Russian Federation, together with other relevant departments, are preparing amendments to the bill, which provides for a significant increase in fines for companies for personal data leaks. However, such fines can be reduced if a number of conditions are met, as follows from the document signed by the head of the Ministry of Digital Development, Maksut Shadaev. The document was presented in response to Senator Artem Sheikin and is at the disposal of RIA Novosti.
Bills tightening administrative liability for personal data leakage were previously approved by the State Duma in the first reading. The bills are supposed to introduce new elements of administrative offenses and multiply fines. In some cases, we are talking about tens and even hundreds of millions of rubles in fines, and for those who steal data, punishment in the form of imprisonment for up to 10 years can be provided.
At the moment, the Ministry of Justice and the Ministry of Digital Development, together with other federal authorities, are developing amendments to the bill, taking into account the feedback of the government of the Russian Federation. As part of these amendments, the possibility of reducing the amount of administrative liability for operators who have leaked data if they meet a number of conditions is being considered.
Among these conditions is the implementation by the operator of personal data of "annual expenses for information security measures not lower than a certain amount". Also, to mitigate the punishment, the operator will make a monetary payment to personal data subjects in connection with the leakage of such data.
Important conditions in the department are also the confirmation of the operator's compliance with the requirements for the protection of personal data when processing them in personal data information systems, as well as the absence of circumstances aggravating administrative liability for the relevant offense.
The Ministry of Digital Development emphasizes that the adoption of the bill, taking into account the proposed amendments, will contribute to the achievement of the goals outlined in the regulatory document.
Source
The Ministry of Digital Development and the Ministry of Justice of the Russian Federation, together with other relevant departments, are preparing amendments to the bill, which provides for a significant increase in fines for companies for personal data leaks. However, such fines can be reduced if a number of conditions are met, as follows from the document signed by the head of the Ministry of Digital Development, Maksut Shadaev. The document was presented in response to Senator Artem Sheikin and is at the disposal of RIA Novosti.
Bills tightening administrative liability for personal data leakage were previously approved by the State Duma in the first reading. The bills are supposed to introduce new elements of administrative offenses and multiply fines. In some cases, we are talking about tens and even hundreds of millions of rubles in fines, and for those who steal data, punishment in the form of imprisonment for up to 10 years can be provided.
At the moment, the Ministry of Justice and the Ministry of Digital Development, together with other federal authorities, are developing amendments to the bill, taking into account the feedback of the government of the Russian Federation. As part of these amendments, the possibility of reducing the amount of administrative liability for operators who have leaked data if they meet a number of conditions is being considered.
Among these conditions is the implementation by the operator of personal data of "annual expenses for information security measures not lower than a certain amount". Also, to mitigate the punishment, the operator will make a monetary payment to personal data subjects in connection with the leakage of such data.
Important conditions in the department are also the confirmation of the operator's compliance with the requirements for the protection of personal data when processing them in personal data information systems, as well as the absence of circumstances aggravating administrative liability for the relevant offense.
The Ministry of Digital Development emphasizes that the adoption of the bill, taking into account the proposed amendments, will contribute to the achievement of the goals outlined in the regulatory document.
Source
