{"id":3392,"date":"2025-05-13T17:51:42","date_gmt":"2025-05-13T14:51:42","guid":{"rendered":"https:\/\/kbk-accounting.ru\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/"},"modified":"2025-05-13T17:54:41","modified_gmt":"2025-05-13T14:54:41","slug":"personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025","status":"publish","type":"post","link":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/","title":{"rendered":"Personal data: new fines up to RUB 500 million starting May 30, 2025"},"content":{"rendered":"<p>On May 30, 2025, significant amendments to Russia\u2019s Personal Data Law (Federal Law No. 152-FZ) will come into effect. Introduced by Federal Law No. 420-FZ dated November 30, 2024, the changes tighten regulatory oversight and drastically increase penalties for non-compliance. In serious cases \u2014 especially data breaches \u2014 fines may reach up to <strong>RUB 500 million (appr. EUR\u00a05\u00a0million)<\/strong>.<\/p>\n<p>There\u2019s still time to prepare. Here\u2019s what companies should do before the end of May.<\/p>\n<ol>\n<li>\n<h4><strong> File your notification with Roskomnadzor<\/strong><\/h4>\n<\/li>\n<\/ol>\n<p>Even if your organization has been processing personal data for years, but still have not submitter a notification to Roskomnadzor, Russia\u2019s data protection authority, you still must do it. This applies to all companies, including those processing only employee data.<\/p>\n<p>There are three types of notifications:<\/p>\n<ul>\n<li>Start of personal data processing<\/li>\n<li>Amendments to an existing notification<\/li>\n<li>Termination of data processing<\/li>\n<\/ul>\n<p>Notifications can be submitted online via <a href=\"https:\/\/pd.rkn.gov.ru\/\">pd.rkn.gov.ru<\/a> or in paper form.<\/p>\n<p><strong>\u00a0<\/strong><\/p>\n<ol start=\"2\">\n<li>\n<h4><strong> Review and update consent documentation<\/strong><\/h4>\n<\/li>\n<\/ol>\n<p>Processing personal data requires documented consent from the data subject. While penalties for missing consent remain unchanged, they are still substantial \u2014 up to RUB 700,000 (EUR 7,000) for a first-time offense.<\/p>\n<p>Exceptions: Separate consent is not required when transferring data to government bodies as mandated by law. However, if you outsource HR or accounting functions to a third party, explicit consent is required.<\/p>\n<p>Note: Currently, consent may be included in an employment contract. But this may change \u2014 a draft law (No. 679980-8) would require consent to be a standalone document.<\/p>\n<p>&nbsp;<\/p>\n<ol start=\"3\">\n<li>\n<h4><strong> Audit and clean up stored personal data<\/strong><\/h4>\n<\/li>\n<\/ol>\n<p>Keep only what is necessary. Dispose of:<\/p>\n<ul>\n<li>Outdated or unnecessary document copies<\/li>\n<li>Data of former employees<\/li>\n<li>Information where consent has expired or been withdrawn<\/li>\n<\/ul>\n<p>Deletion must be documented in a formal data destruction report, which should be retained for three years.<\/p>\n<p>&nbsp;<\/p>\n<ol start=\"4\">\n<li>\n<h4><strong> Prepare for potential data breaches<\/strong><\/h4>\n<\/li>\n<\/ol>\n<p>Companies must take adequate measures to protect personal data. Currently, the maximum fine for a breach is RUB 300,000 (EUR 3,000). From May 30, fines will be scaled based on the severity and volume of leaked data.<\/p>\n<p>In the event of repeated breaches, turnover-based fines will apply \u2014 from 1% to 3% of annual revenue, but not less than RUB 20 million (EUR 200,000), and not more than RUB 500 million (EUR 5 million).<\/p>\n<p>If a breach occurs, you must notify Roskomnadzor within 24 hours of detection. A full incident report must follow within 72 hours.<\/p>\n<p>* * *<\/p>\n<p><strong>We recommend reviewing your company\u2019s data handling practices now<\/strong>:<\/p>\n<ul>\n<li>Submit your Roskomnadzor notification<\/li>\n<li>Update consent procedures<\/li>\n<li>Conduct a personal data audit<\/li>\n<li>Ensure your breach response plan is in place<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>On May 30, 2025, significant amendments to Russia\u2019s Personal Data Law (Federal Law No. 152-FZ) will come into effect. Introduced by Federal Law No. 420-FZ dated November 30, 2024, the changes tighten regulatory oversight and drastically increase penalties for non-compliance&#8230;.<\/p>\n","protected":false},"author":2,"featured_media":3340,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Personal data: new fines up to RUB 500 million starting May 30, 2025 - KBK Accounting<\/title>\n<meta name=\"description\" content=\"From May 30, 2025, fines for violations of personal data handling will reach RUB 500 million. What do companies need to do in time?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Personal data: new fines up to RUB 500 million starting May 30, 2025 - KBK Accounting\" \/>\n<meta property=\"og:description\" content=\"From May 30, 2025, fines for violations of personal data handling will reach RUB 500 million. What do companies need to do in time?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/\" \/>\n<meta property=\"og:site_name\" content=\"KBK Accounting\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-13T14:51:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-13T14:54:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kbk-accounting.ru\/wp-content\/uploads\/2024\/12\/Screenshot-2024-12-11-112635.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1180\" \/>\n\t<meta property=\"og:image:height\" content=\"945\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Kbk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kbk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/\",\"url\":\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/\",\"name\":\"Personal data: new fines up to RUB 500 million starting May 30, 2025 - KBK Accounting\",\"isPartOf\":{\"@id\":\"https:\/\/kbk-accounting.ru\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/kbk-accounting.ru\/wp-content\/uploads\/2024\/12\/Screenshot-2024-12-11-112635.jpg\",\"datePublished\":\"2025-05-13T14:51:42+00:00\",\"dateModified\":\"2025-05-13T14:54:41+00:00\",\"author\":{\"@id\":\"https:\/\/kbk-accounting.ru\/#\/schema\/person\/eb7cd5190611a12dfa1d51d8d53b5d2c\"},\"description\":\"From May 30, 2025, fines for violations of personal data handling will reach RUB 500 million. What do companies need to do in time?\",\"breadcrumb\":{\"@id\":\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#primaryimage\",\"url\":\"https:\/\/kbk-accounting.ru\/wp-content\/uploads\/2024\/12\/Screenshot-2024-12-11-112635.jpg\",\"contentUrl\":\"https:\/\/kbk-accounting.ru\/wp-content\/uploads\/2024\/12\/Screenshot-2024-12-11-112635.jpg\",\"width\":1180,\"height\":945},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/kbk-accounting.ru\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Personal data: new fines up to RUB 500 million starting May 30, 2025\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/kbk-accounting.ru\/#website\",\"url\":\"https:\/\/kbk-accounting.ru\/\",\"name\":\"KBK Accounting\",\"description\":\"Accounting outsourcing services\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/kbk-accounting.ru\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/kbk-accounting.ru\/#\/schema\/person\/eb7cd5190611a12dfa1d51d8d53b5d2c\",\"name\":\"Kbk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/kbk-accounting.ru\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/53986015f7f17c3b2db4e6f3043093df?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/53986015f7f17c3b2db4e6f3043093df?s=96&d=mm&r=g\",\"caption\":\"Kbk\"},\"url\":\"https:\/\/kbk-accounting.ru\/en\/author\/kbkeditor\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Personal data: new fines up to RUB 500 million starting May 30, 2025 - KBK Accounting","description":"From May 30, 2025, fines for violations of personal data handling will reach RUB 500 million. What do companies need to do in time?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/","og_locale":"en_US","og_type":"article","og_title":"Personal data: new fines up to RUB 500 million starting May 30, 2025 - KBK Accounting","og_description":"From May 30, 2025, fines for violations of personal data handling will reach RUB 500 million. What do companies need to do in time?","og_url":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/","og_site_name":"KBK Accounting","article_published_time":"2025-05-13T14:51:42+00:00","article_modified_time":"2025-05-13T14:54:41+00:00","og_image":[{"width":1180,"height":945,"url":"https:\/\/kbk-accounting.ru\/wp-content\/uploads\/2024\/12\/Screenshot-2024-12-11-112635.jpg","type":"image\/jpeg"}],"author":"Kbk","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kbk","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/","url":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/","name":"Personal data: new fines up to RUB 500 million starting May 30, 2025 - KBK Accounting","isPartOf":{"@id":"https:\/\/kbk-accounting.ru\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#primaryimage"},"image":{"@id":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#primaryimage"},"thumbnailUrl":"https:\/\/kbk-accounting.ru\/wp-content\/uploads\/2024\/12\/Screenshot-2024-12-11-112635.jpg","datePublished":"2025-05-13T14:51:42+00:00","dateModified":"2025-05-13T14:54:41+00:00","author":{"@id":"https:\/\/kbk-accounting.ru\/#\/schema\/person\/eb7cd5190611a12dfa1d51d8d53b5d2c"},"description":"From May 30, 2025, fines for violations of personal data handling will reach RUB 500 million. What do companies need to do in time?","breadcrumb":{"@id":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#primaryimage","url":"https:\/\/kbk-accounting.ru\/wp-content\/uploads\/2024\/12\/Screenshot-2024-12-11-112635.jpg","contentUrl":"https:\/\/kbk-accounting.ru\/wp-content\/uploads\/2024\/12\/Screenshot-2024-12-11-112635.jpg","width":1180,"height":945},{"@type":"BreadcrumbList","@id":"https:\/\/kbk-accounting.ru\/en\/personal-data-new-fines-up-to-rub-500-million-starting-may-30-2025\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kbk-accounting.ru\/en\/"},{"@type":"ListItem","position":2,"name":"Personal data: new fines up to RUB 500 million starting May 30, 2025"}]},{"@type":"WebSite","@id":"https:\/\/kbk-accounting.ru\/#website","url":"https:\/\/kbk-accounting.ru\/","name":"KBK Accounting","description":"Accounting outsourcing services","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kbk-accounting.ru\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kbk-accounting.ru\/#\/schema\/person\/eb7cd5190611a12dfa1d51d8d53b5d2c","name":"Kbk","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kbk-accounting.ru\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/53986015f7f17c3b2db4e6f3043093df?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/53986015f7f17c3b2db4e6f3043093df?s=96&d=mm&r=g","caption":"Kbk"},"url":"https:\/\/kbk-accounting.ru\/en\/author\/kbkeditor\/"}]}},"_links":{"self":[{"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/posts\/3392"}],"collection":[{"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/comments?post=3392"}],"version-history":[{"count":2,"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/posts\/3392\/revisions"}],"predecessor-version":[{"id":3396,"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/posts\/3392\/revisions\/3396"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/media\/3340"}],"wp:attachment":[{"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/media?parent=3392"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/categories?post=3392"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kbk-accounting.ru\/en\/wp-json\/wp\/v2\/tags?post=3392"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}