Russia: Adoption of Amendment to Law No. 152 on Personal Data including cybersecurity requirements

On 8 July 2022, the Federation Council of the Russian Federation adopted the Amendment to Law No. 152 (Bill No. 101234-8). The Bill introduces additional cybersecurity reporting requirements for entities collecting personal data. In particular, the Bill requires personal data operators to report all cyberattacks and unauthorized transmissions of data to authorities within 24 hours after the incident and inform them of the measures taken to prevent the potential harm to the data holder resulting from the breach.