Slides from Data Localization and Hybrid Cloud meeting, December 3, 2014, Industriens Hus, Copenhagen. http://itek.di.dk/Arrangementer/Pages/DataLocalizationandHybridCloud.aspx

1. Russian Data
Localisation Legislation

2. Om os
Anna Shashina Nis Peter Dall
Associate Advokat, partner
Head of Russian Desk
D: +44 (0)20 7905 6215 D: +45 39 14 16 50
M: +44 7711014335 M: +45 20 75 27 47
E: Anna.Shashina@twobirds.com E: Nis.Dall@twobirds.com

3. Bird & Bird globalt
• Eneste internationale
advokatkontor i Danmark.
• 27 kontorer i hele verden.
• Klienter i 118 lande.
• Mere end 1000 ansatte advokater.

4. Emnet
Ved introduktion af nye russiske persondataregler
”Alle persondata skal lagres i Rusland”
”Russiske persondata må ikke udføres”
”Russere må ikke bruge europæiske tjenester”
I dag
Billedet er mere nuanceret
Reglerne har stadig ikke helt fundet deres endelige leje

5. Russian Data Localisation Legislation
Page 5

6. Regulatory Framework
• Federal Law No. 152-FZ dated 27 July 2006 On Personal Data
 Data operator
 Personal data
 Data Subject
 Trans-border transfer
• Regulator – Federal Service On Supervising Communication,
Information Technologies and Mass Media (Roskomnadzor)
 Authority
 Audits
Page 6

7. Page 7
New Data Localisation Legislation
• How became law
 24 June 2014 – draft law introduced to the Russian
Parliament;
 4 July 2014 – second and third reading in the lower chamber
of the Parliament;
 9 July 2014 – approved by the upper chamber of the
Parliament;
 21 July 2014 – signed by the President
• Commencement date
 1 September 2016 - but note the initiative to bring the
commencement date forward to 1 January 2015

8. Page 8
Key Elements of Data Localisation Law
1. Amending Federal Law On Personal Data
1.1 Obligations of the data operator:
When collecting personal data, including on the Internet, the data
operator is obliged to ensure that the personal data of the
Russian citizens is recorded, systemised, accumulated, stored,
updated (renewed and modified) and sourced by using the data
bases which are situated in Russia subject to the certain
exceptions of the Law On Personal Data.
Note: the scope of the data processing operations does not include using,
transferring (disseminating, providing, accessing), anonymising, blocking,
deleting and destructing personal data

9. Page 9
Key Elements of Data Localisation Law
1.2 Notification of the DPA:
 location of the database;
1.3 Rights of the DPA:
 to restrict access to the information processed in violation of
the laws of the Russian Federation on personal data.

10. Page 10
Key Elements of Data Localisation Law
2. Amending Federal Law N149-FZ On Information, Information
Technologies and Protection of Information
 blocking access to web-sites/domain names
3. Amending Federal Law N 242-FZ amends the Law On
governmental and municipal control of legal entities and
individual entrepreneurs
 excluding control over data processing from the scope of that
law

11. Page 11
Interpretation of the Data Localisation Law
• Categories of data operators;
• Does the Law apply to foreign companies?
• Categories of personal data;
• How to identify the data of Russian citizens?
• Data collected online and offline;
• Exclusively in Russia?
• Trans-border transfer;
• Grace period beyond 1 September 2016

12. Page 12
Compliance and Penalties
• Compliance
 Secondary legislation giving definitive interpretation
 Due diligence
 Duplicate databases?
 Server capacity in Russia
• Penalties
 Currently - Administrative fine
 From 1 September 2016 – in addition to fine also the right of
the DPA to block access to web-sites/domain names

13. Bird & Bird is an international legal practice comprising Bird & Bird LLP and its affiliated and associated businesses.
Bird & Bird LLP is a limited liability partnership, registered in England and Wales with registered number OC340318 and is authorised and regulated by the
Solicitors Regulation Authority. Its registered office and principal place of business is at 15 Fetter Lane, London EC4A 1JP. A list of members of Bird & Bird LLP and
of any non-members who are designated as partners, and of their respective professional qualifications, is open to inspection at that address.
twobirds.com
Thank you