RBC: Mishustin sent the final version of the law on fines for leaking personal data
Photo: pixabay.com
Three Russian MPs – Senators Andrey Turchak and Irina Rukavishnikova sent to the final Dušov MP Alexandra K. – State representative Alexandra K version of the bill, which to Prime Minister Mikhail Mishustin, he proposes the introduction of contractual fines for leaking personal data. RBC informs about this with a reference to a copy of the document, the authenticity of which was confirmed by a source close to one of the authors of the amendments. According to this initiative, the following fines are awarded to legal entities for the leakage of personal data:
– If the leakage concerns from 1 thousand. up to 10 thousand subjects (citizens), there will be a fine from 3 to 5 million rubles.
>
– For data leakage from 10 thousand to 100 thousand subjects – from 5 to 10 million rubles.
– For data leakage from more than 100 thousand entities – from 10 to 15 million rubles.
p>
It is also proposed to introduce penalties for repeated violations, which will range from 0.1% to 3% of the company's income for the previous year or part of a current year, but not less than 15 million and not more than 500 million rubles.< /p>
It is proposed to set fines from 15 to 20 million rubles for the leakage of biometric personal data. The draft law also contains various fines for the leakage of personal data of individuals and officials.
The explanatory note to the draft contains data from Kaspersky Lab, according to which 168 cases of disclosure of important databases of Russian companies were found. in 2022. More than 2 billion records containing information about nearly 300 million users have been released, 16% of which contain passwords. Delivery (34%) and retail (14%) were the leaders in terms of the volume of data compromised.
Currently the maximum fines for companies that have leaked personal data are up to 100,000 and up to 300,000 rubles in case of repeated violation.