The Ministry of Digital Development has prepared the bill that will stiffen penalties for companies for leaks of customer personal data. In the event of such an incident, the organization will face a fine of 1% of the annual turnover. The fine may be increased to 3% if the company that leaked information does not notify Roskomnadzor of the incident within 24 hours.

According to the sources of Kommersant, the bill will be submitted to the State Duma next week. The State Duma Information Policy Committee supports adoption of the bill.

According to experts, additional investments from companies will be required to promptly determine data leaks. In particular, appropriate software will be required, Alexey Parfentiev, head of Analytics Department at SearchInform, explains.

According to Elena Avakyan, Counsel at EPAM, the measures proposed by the Ministry of Digital Development are generally similar to the principles of the General Data Protection Regulation. These principles are in effect in Europe and provide for the collection of turnover-based fines for data leaks and an increase in fine amount if an organization fails to notify the regulator.

Original in Russian