Compare with different regulatory event:

Description

Passage of Amendment to Law No. 152-FZ on Personal Data including cybersecurity measures

On 6 July 2022, Russia's State Duma passed the Bill on Strengthening the Protection of Personal Data of Russians which amends Law No. 152-FZ on Personal Data. The Bill introduces additional cybersecurity reporting requirements for entities collecting personal data. In particular, the Bill would require personal data operators to report all cyberattacks and unauthorized transmissions of data to authorities within 24 hours after the incident and inform them of the measures taken to prevent the potential harm to the data holder resulting from the breach.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2022-04-06
under deliberation

On 6 April 2022, an Amendment to Law No. 152-FZ is introduced in Russia's State Duma. The Bill intr…

2022-07-06
under deliberation

On 6 July 2022, Russia's State Duma passed the Bill on Strengthening the Protection of Personal Dat…

2022-07-08
adopted

On 8 July 2022, the Federation Council of the Russian Federation adopted the Amendment to Law No. 1…

2022-09-01
in force

On 1 September 2022, the Amendment to Law No. 152 (Bill No. 101234-8) outlining cybersecurity measu…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): storage (any form)
Regulatory tool
Responsive security requirement
Sanctions
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): storage (any form)