Russia: Signed Bill establishing liability for the illegal placement of biometric personal data (Bill No. 353266-8)

On 12 December 2023, the Bill establishing liability for the illegal placement of biometric personal data (Bill No. 353266-8)was signed into law. The Bill is applicable to banks, MFCs and other organisations. The Bill imposes a fine of RUB 100’000 up to RUB 300’000 on officials, and between RUB 500’000 and RUB one million on legal entities for disregarding the requirements when placing and updating biometric personal data. Further, the Bill imposes a fine for processing personal data without written or invalid consent. These fines range from RUB 10’000 to RUB 15’000 for citizens, RUB 100’000 to RUB 300’000 for officials, and RUB 500’000 to RUB 1.5 million for legal entities. The Bill will enter into force on 22 December 2023.