Bloomberg Law: Privacy & Data Security brings you single-source access to the expertise of Bloomberg Law’s privacy and data security editorial team, contributing practitioners,...
Aug. 5 — The Russian government Aug. 3 for the first time issued a detailed clarification of the country's new data localization requirements, less than a month before they are set to take effect.
The Ministry of Communications and Mass Media (Minkomsvyaz) moved to clarify data localization requirements (Federal Law No. 242-FZ) that will take effect Sept. 1. The law, which President Vladimir Putin signed into law in July 2014, will require data operators to store all personal data of citizens of the Russian Federation in databases located inside Russia.
The clarification is aimed to “minimize tensions” caused by the enactment of Federal Law No. 242-FZ, the ministry said.
In a July 14 statement, the presidential press-service quoted President Vladimir Putin as pledging to discuss with cabinet ministers a possible move of the data localization deadline from Sept. 1 to a later date. The deadline has already been moved once, from Sept. 1, 2016, to Sept. 1, 2015.
The data localization guidelines issued by Minkomsvyaz came as an unusual development. Previously, data localization guidance was issued by the Federal Service for Oversight of Communications, Information Technology and Mass Media, also known under its Russian acronym Roscomnadzor, the agency in charge of data protection and data localization matters.
If Internet sites can be accessed in the Russian Federation, it doesn't automatically mean that data localization requirements apply to these websites, the clarification said. However, the Russian legislative requirements can apply to foreign entities, including websites, as long as the business activities of the entities are oriented towards Russia's audience, it said.
The ministry also noted the following criteria for Russia-oriented online business activities: the use of specific domain names such as .ru, .su, .moscow, etc.; the availability of the Russian-language version of a website; the presence of Russian-language ads; and an ability to carry out online transactions in Russian rubles.
Provisions of the Federal Law No. 242-FZ can't be interpreted as retroactively effective, the ministry said. Personal data of Russian citizens collected before Sept. 1, 2015, can remain in databases in foreign jurisdictions as long as the data remains unchanged, it said. However, if these databases are updated and changed after Sept. 1, 2015, then these databases become subject to data localization requirements, according to the clarification.
The new data localization requirements will only apply to deliberate activities to collect personal data, the ministry said. If a business makes the contact details of employees available to another business as a part of legitimate business activity, it can't be regarded as personal data collection, the ministry said.
The provisions of Federal Law No. 242-FZ won't apply to cross-border data transfers as long as personal data collection takes place in Russia (in primary databases), and then the transfer of personal data to other jurisdictions (secondary databases) occurs, the clarification said.
The law won't restrict a remote access to databases in Russia, the clarification said. The ministry also said an employer will be able to transfer the personal data of employees to foreign jurisdictions as long as these transfers meet Russian data protection requirements.
Federal Law No. 242-FZ doesn't restrict the disclosure of personal data by Russian citizens so as to use cross-border services rendered by foreign entities, such as online booking, banking services or the online order of goods, the ministry said. The new data localization requirements also won't apply to non-resident entities and individuals located and operating outside Russia, it said.
However, even if data subjects consented to the processing of their personal data outside Russia, such consent won't provide data controllers with legal grounds for these activities, according to the clarification.
To contact the reporter on this story: Sergei Blagov in Moscow at firstname.lastname@example.org
To contact the editor responsible for this story: Katie W. Johnson at email@example.com
The ministry's clarification is available, in Russian, at http://minsvyaz.ru/ru/personaldata/#1438546984884.
All Bloomberg BNA treatises are available on standing order, which ensures you will always receive the most current edition of the book or supplement of the title you have ordered from Bloomberg BNA’s book division. As soon as a new supplement or edition is published (usually annually) for a title you’ve previously purchased and requested to be placed on standing order, we’ll ship it to you to review for 30 days without any obligation. During this period, you can either (a) honor the invoice and receive a 5% discount (in addition to any other discounts you may qualify for) off the then-current price of the update, plus shipping and handling or (b) return the book(s), in which case, your invoice will be cancelled upon receipt of the book(s). Call us for a prepaid UPS label for your return. It’s as simple and easy as that. Most importantly, standing orders mean you will never have to worry about the timeliness of the information you’re relying on. And, you may discontinue standing orders at any time by contacting us at 1.800.960.1220 or by sending an email to firstname.lastname@example.org.
Put me on standing order at a 5% discount off list price of all future updates, in addition to any other discounts I may quality for. (Returnable within 30 days.)
Notify me when updates are available (No standing order will be created).
This Bloomberg BNA report is available on standing order, which ensures you will all receive the latest edition. This report is updated annually and we will send you the latest edition once it has been published. By signing up for standing order you will never have to worry about the timeliness of the information you need. And, you may discontinue standing orders at any time by contacting us at 1.800.372.1033, option 5, or by sending us an email to email@example.com.
Put me on standing order
Notify me when new releases are available (no standing order will be created)