Personal data

Do you know that having a contact form on your website makes you a personal data operator, and penalties for violations can amount to several million rubles?

As soon as you begin to collect personal data (for example, clients’ phone numbers and emails), you have an obligation to notify Russian authorities about processing of personal data; you shall store personal data on servers located in Russia; obtain consent to process personal data; comply with restrictions regarding purposes, scope, period and confidentiality of the personal data processing; develop and publish a Personal Data Policy; approve many internal documents; appoint a responsible employee or a department; conduct internal audits and trainings; certify equipment (in some cases); and also fulfill a whole range of other requirements.

Our lawyers will take on all these responsibilities so that you can easily receive contacts of new customers and develop your business. And the company will be protected from fines.

A European advertising agency contacted us to organize its personal data processing in accordance with Russian law.

Our specialists audited the company’s personal data processing system and provided advice on bringing it into compliance with the law.

We carried out the following activities: data storage was transferred to Russian servers, the composition, procedure and purposes of personal data processing were determined, the volume of collected data was reduced, a standard consent for data processing was drawn up, a Personal Data Policy was developed, internal documents were approved, and a corresponding notification sent to authorities.

As a result, the client’s personal data processing system became compliant with the law, and the risk of fines was mitigated.