Russian President Vladimir Putin has approved a law that introduces fines for leaks of personal data of clients of organizations. The corresponding document is available on the website of legal acts.
According to the adopted legislation, the following fines are provided for the unauthorized distribution of data in the amount of 1 to 10 thousand subjects of personal information or for the leakage of 10 to 100 thousand of their identifiers: for individuals – from 100 to 200 thousand rubles, for officials – from 200 to 400 thousand rubles, and for organizations – from 3 to 5 million rubles.
In cases of mass leaks affecting more than 100 thousand entities or over 1 million identifiers, the fines will increase to 400 thousand rubles for individuals, up to 600 thousand for officials, and up to 15 million rubles for legal entities.
In case of repeated violation, it is proposed to establish fines for citizens of up to 30 thousand rubles, for officials of up to 200 thousand, and for legal entities of up to 500 thousand rubles.
Stricter fines have been established for violations related to biometric data leakage: they can reach 500 thousand rubles for individuals, 1.5 million rubles for government employees, and 20 million rubles for legal entities. Repeated violations will also be punished: fines will amount to up to 800 thousand rubles for individuals and up to 2 million for officials. For legal entities, fines are provided in the amount of 1% to 3% of annual revenue, with a minimum amount of 25 million rubles and a maximum of 500 million rubles.
