Russia: Adopted Law No. 152-FZ on Personal Data including cross-border data transfer regulation

On 14 July 2006, the Federation Council adopted Law No. 152-FZ on Personal Data, including cross-border data transfer regulation. The Law requires entities to ensure that the data is transferred to foreign states that provide adequate protection of the rights of personal data subjects. The transfers to foreign states that do not provide an adequate level of protection can be constructed based on the consent of the data subject, international treaties, based on laws to protect the right of citizens and national security, to execute an agreement to which the data subject is a party and protection of life, health, and other vital interests of the data subject. Transfers can be prohibited to protect the morality, health, rights and legitimate interests of citizens and defence of the country and the security of the state. The Law enters into force 180 days after its publication in the Official Monitor.