According to Roskomnadzor requirements

[relemedf5w023]

Consent will need to be drawn up in Russian. It must contain the full name, telephone number, email address or postal address of the subject of the personal data owner, as well as the name and address of the operator receiving consent.

The consent must also include the period during which it is valid, as well as information about the operator’s information resources through which it will transfer access to data to an unlimited number of persons.

It is expected that detailed consent will allow for a more careful and conscious approach to data transfer, and the requirements for the content of such consent allow for a flexible approach, providing for conditions and prohibitions for data processing. However, the new requirements are associated with costs for additional administration of the procedure new zealand mobile database and processing personal data, as well as possible complaints from citizens to Roskomnadzor and lawsuits in the courts.

On February 10, 2021, the State Duma adopted in the third (final) reading a bill doubling fines for violating the rules for processing personal data. The changes will be made to Article 13.11 of the Code of Administrative Offenses (CAO) "Violation of the legislation of the Russian Federation in the field of personal data."

On March 1, 2021, the Law on the Prohibition of Distribution of Personal Data of Russian Citizens without their Special Consent came into force. Operators are now required to delete personal data at the first request of their owner. Citizens can demand that any online resource (website, social network, messenger, etc.) stop distributing personal data. The resource administration will have three days to consider the application and make a decision on it. If after three days the resource continues to disseminate the data, the citizen has the right to file a lawsuit.