The Ministry of communications proposed to be fined for leaking personal data

CC0 / TBIT / computer Keyboard. Archival photoThe Ministry of communications proposed to be fined for leaking personal dataCC0 / TBIT /

The Ministry of communications has prepared amendments to the RF Code of administrative offences (koapp) providing for the imposition on operators and handlers of personal data penalties for their diversion, and the creation of public databases of such data, the draft posted on the portal of projects of normative acts.

«The bill provides for the establishment of the liability of the operator for the actions of persons engaged in personal data processing on its behalf, as well as responsibility for creating publicly available sources of personal data, containing information from state and municipal information systems of personal data by unauthorized persons or in cases established by Federal laws», — stated in the explanatory note to the draft.

In particular, according to the project, failure by the operator provided by the legislation of the Russian Federation in the field of personal data responsibilities to ensure proper control over the actions of a person performing personal data processing on behalf of the operator, shall entail a warning or imposition of an administrative fine. For individuals, this fine can amount to 1-2 thousand rubles, officials – from 3 to 6 thousand rubles, individual entrepreneurs – 5-10 thousand rubles, for legal entities – 10-30 thousand rubles.

Violation by a person engaged in processing personal data on behalf of the operator, the requirements of legislation in the field of personal data shall entail the imposition of an administrative fine on the operator, who instructed that person the processing of personal data, to the project. For individuals, this fine can amount to 3-5 thousand rubles, officials – from 5 to 15 thousand rubles, individual entrepreneurs – 10-20 thousand rubles, legal entities – 15-30 thousand roubles.

According to the project, the creation of publicly available sources of personal data, containing information from state and municipal information systems of personal data by unauthorized persons or in cases established by Federal laws, shall entail a warning or imposition of an administrative fine on citizens in the amount of 1-2 thousand rubles, officials – from 3 to 6 thousand rubles, individual entrepreneurs – 5-10 thousand rubles, legal entities – 10-30 thousand rubles.

Source