Russia: Implemented Federal Law No. 266-FZ amending 152-FZ on Personal Data (Bill No. 101234-8) including cybersecurity regulation

On 1 September 2022, the Amendment to Law No. 152 (Bill No. 101234-8) outlining cybersecurity measures is implemented. The Bill introduces additional cybersecurity reporting requirements for entities collecting personal data. In particular, the Bill requires personal data operators to report all cyberattacks and unauthorized transmissions of data to authorities within 24 hours after the incident and inform them of the measures taken to prevent the potential harm to the data holder resulting from the breach.