Russia: Implemented Law No. 589-FZ establishing liability for the illegal placement of biometric personal data

On 22 December 2023, Law No. 589-FZ establishing liability for the illegal placement of biometric personal data, previously Bill No. 353266-8 entered into force. The Law is applicable to banks, MFCs and other organisations. The Law imposes a fine of RUB 100’000 up to RUB 300’000 on officials, and between RUB 500’000 and RUB one million on legal entities for disregarding the requirements when placing and updating biometric personal data. Further, the Law imposes a fine for processing personal data without written or invalid consent. These fines range from RUB 10’000 to RUB 15’000 for citizens, RUB 100’000 to RUB 300’000 for officials, and RUB 500’000 to RUB 1.5 million for legal entities.