On 1 September 2022, Federal Law No. 266-FZ amending 152-FZ on Personal Data (Bill No. 101234-8) including data protection regulation, entered into force. Specifically, personal data operators are not able to deny services to citizens refusing to provide personal data, especially biometric data. Furthermore, the applicable deadline for operators to comply with requests from both regulators and citizens on the potentially illegal use of personal data has been reduced from 30 to 10 days. Finally, the Bill prohibits the processing of biometric personal data of minors, defined as individuals under 18 years old.
Original source