Progress

Current status
in force
01 Sep 2022 in force
08 Jul 2022 adopted
06 Jul 2022 under deliberation
06 Apr 2022 under deliberation

Scope

Implementers
Russia
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
legislature
Government Body
parliament
Implementation Level
national

Timeline of events

01 Sep 2022
in force

Implemented Federal Law No. 266-FZ amending 152-FZ on Personal Data (Bill No. 101234-8) including cybersecurity regulation

On 1 September 2022, the Amendment to Law No. 152 (Bill No. 101234-8) outlining cybersecurity measures is implemented. The Bill introduces additional cybersecurity reporting requirements for entities collecting personal data. In particular, the Bill…

Source
Event type law
Action type implementation
Government branch legislature
Government body parliament
08 Jul 2022
adopted

Adoption of Amendment to Law No. 152 on Personal Data including cybersecurity requirements

On 8 July 2022, the Federation Council of the Russian Federation adopted the Amendment to Law No. 152 (Bill No. 101234-8). The Bill introduces additional cybersecurity reporting requirements for entities collecting personal data. In particular, the …

Source
Event type law
Action type adoption
Government branch legislature
Government body parliament
06 Jul 2022
under deliberation

Passage of Amendment to Law No. 152-FZ on Personal Data including cybersecurity measures

On 6 July 2022, Russia's State Duma passed the Bill on Strengthening the Protection of Personal Data of Russians which amends Law No. 152-FZ on Personal Data. The Bill introduces additional cybersecurity reporting requirements for entities collectin…

Source
Event type law
Action type passage
Government branch legislature
Government body parliament
06 Apr 2022
under deliberation

Introduction of Amendment to Law No. 152-FZ on Personal Data including cybersecurity requirements

On 6 April 2022, an Amendment to Law No. 152-FZ is introduced in Russia's State Duma. The Bill introduces additional cybersecurity reporting requirements for entities collecting personal data. In particular, the Bill would require personal data oper…

Source
Event type law
Action type introduction
Government branch legislature
Government body parliament