New rules for personal data processing will come into force in Russia on May 30, 2025.

 

Starting from May 30, 2025, new rules for the processing of personal data will come into force in Russia: fines will increase significantly, negotiable sanctions will appear, and up to 500 million rubles will be threatened for the leakage of biometric data.

What will change from May 30, 2025

Federal Law No. 420-FZ of 11/30/2024 tightens liability for violations in the field of personal data. The changes apply to all operators: companies, sole proprietors, the self-employed, and even individuals who process the data of other citizens.

Failure to notify Roskomnadzor

Starting from May 30, 2025, fines for failure to provide notification of the start of personal data processing will increase.:

Individual: 5,000-10,000 rubles.
Officials: 30,000-50,000 rubles.
Sole proprietors and organizations: 100,000 – 300,000 rubles .

The notification is submitted in the form approved by Roskomnadzor Order No. 180 dated 10/28/2022, via the Roskomnadzor website, the Public Services portal, or by mail.

Failure to report a data leak

Starting from May 30, 2025, fines for failure to provide notification of a personal data leak will increase.:

Individual: 50,000-100,000 rubles.
Officials: 400,000-800,000 rubles.
Sole proprietors and organizations: 1-3 million rubles.

Companies are required to report the leak to Roskomnadzor within 24 hours, and the results of an internal investigation within 72 hours.

Leakage of personal data

Starting from May 30, 2025, fines will be imposed for the leakage of personal data, depending on the number of victims.:

1,000-10,000 people:
Individual: 100,000-200,000 rubles.
Officials: 200,000-400,000 rubles.
Sole proprietors and organizations: 3-5 million rubles.
10,000-100,000 people:
Individual: 200,000-300,000 rubles.
Officials: 300,000-500,000 rubles.
Sole proprietors and organizations: 5-10 million rubles.
More than 100,000 people:
Individual: 300,000-400,000 rubles.
Officials: 400,000-600,000 rubles.
Sole proprietors and organizations: 10-15 million rubles.

Repeated violations may result in a turnover fine of 1-3% of annual revenue, but not less than 20 million rubles and not more than 500 million rubles.

Biometric data leak

Starting from May 30, 2025, fines will be imposed for the illegal transfer of biometric personal data.:

Individual: 400,000-500,000 rubles.
Officials: 1.3–1.5 million rubles.
Sole proprietors and organizations: 15-20 million rubles.

Repeated violations may result in a turnover fine of 1-3% of annual revenue, but not less than 25 million rubles and not more than 500 million rubles.

Criminal liability

Since December 11, 2024, Article 272.1 of the Criminal Code of the Russian Federation has been in effect, criminalizing the illegal use, collection and storage of computer information containing personal data of citizens.:

Fine: up to 300,000 rubles.
Forced labor: up to 4 years
Imprisonment: up to 4 years

If the acts are committed in relation to the personal data of minors or biometric data, the punishment may be increased.:

Fine: up to 700,000 rubles.
Forced labor: up to 5 years
Imprisonment: up to 5 years

Acts committed out of self-interest, causing major damage or by a group of persons by prior agreement, are punishable:

Fine: up to 1 million rubles.
Forced labor: up to 5 years with a fine of up to 1 million rubles.
Imprisonment: up to 6 years with a fine of up to 1 million rubles.

Important: criminal liability does not apply to cases where personal data is processed by individuals solely for personal or family needs.

How to avoid fines
Conduct an audit of the personal data processing processes.
Update internal regulations and policies to meet new requirements.
Make sure that the notifications to Roskomnadzor are submitted in a timely manner.
Ensure that personal data is stored on servers located in Russia.
Train employees in the rules of personal data processing and protection.

Timely compliance with the new requirements will help to avoid significant financial and reputational losses.

A source:  website of Bukhuslug LLC Audience
On the rights of advertising:

At the Auditorium, we provide accounting, tax planning, and reporting services. We will help you adapt to changes in legislation and ensure the accuracy of financial documentation. Your finances are in the safe hands of experts.

Trust the professionals of the “Audience”!

Leave a Reply

Your email address will not be published. Required fields are marked *