Russian data protection laws

GPTKB entity

Statements (57)
Predicate Object
gptkbp:instanceOf privacy law
gptkbp:appliesTo public and private sector organizations
foreign companies targeting Russian citizens
organizations processing personal data of Russian citizens
gptkbp:basisFor public interest
consent
legal obligation
legitimate interests
performance of contract
protection of vital interests
gptkbp:country gptkb:Russia
gptkbp:cross-border_data_transfer_conditions gptkb:treaty
adequate protection in recipient country
consent of data subject
gptkbp:data_breach_notification_authority gptkb:Roskomnadzor
gptkbp:data_breach_notification_required yes
gptkbp:data_breach_notification_timeframe within 24 hours of detection
gptkbp:data_controller_obligations_include implementing security measures
maintaining records of processing activities
notifying authorities of data breaches
obtaining consent for data processing
gptkbp:data_localization_requirement_effective_date 2015-09-01
gptkbp:data_processor_obligations_include assisting controller with data subject requests
ensuring data security
processing data only on controller's instructions
gptkbp:data_subject_rights_include right to access
right to erasure
right to object
right to rectification
right to withdraw consent
gptkbp:enforcedBy gptkb:Roskomnadzor
https://www.w3.org/2000/01/rdf-schema#label Russian data protection laws
gptkbp:main_law_effective_date 2006-07-27
gptkbp:mainLegalCode Federal Law No. 152-FZ On Personal Data
gptkbp:penalties_include fines
blocking of websites
gptkbp:regulates cross-border data transfer
processing of personal data
data subject rights
data controller obligations
data processor obligations
gptkbp:relatedLegislation Federal Law No. 242-FZ
Federal Law No. 149-FZ On Information, Information Technologies and Protection of Information
Federal Law No. 68-FZ On Protection of Population and Territories from Emergency Situations
gptkbp:requires data localization
gptkbp:Roskomnadzor_powers_include conducting inspections
blocking access to non-compliant websites
imposing administrative penalties
gptkbp:special_categories_of_data health data
biometric data
religious beliefs
criminal record
political opinions
sensitive personal data
racial or ethnic origin
gptkbp:bfsParent gptkb:Waves_Enterprise
gptkbp:bfsLayer 8