🇷🇺
Russia
Federal Law No. 152-FZ on Personal Data
Europe🟡 Moderate
Compliance Score
57%
8 Addressed
5 Partial
1 None
Authority
Roskomnadzor
Overview
Russia's data protection law focuses on data localisation, requiring personal data of Russian citizens to be stored within Russia. Roskomnadzor enforces compliance.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
PartialDPO Requirements
PartialChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
AddressedSignificant Data Fiduciary
PartialGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Russia?+
Russia is governed by the Federal Law No. 152-FZ on Personal Data. The law is enforced by the Roskomnadzor. According to our analysis, the country has a Moderate level of data protection framework.
Does Russia require a Data Protection Officer (DPO)?+
Partially. The Federal Law No. 152-FZ on Personal Data may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Russia?+
Yes, Russia has strict data localisation requirements. The Federal Law No. 152-FZ on Personal Data may require certain types of personal data to be stored within the country's borders.
What are the breach notification requirements in Russia?+
The Federal Law No. 152-FZ on Personal Data has limited breach notification requirements. It may only require notifying the regulator, without mandating notification to affected individuals.