The Federal Security Service has developed rules for Russian companies which deal with personal data in digital form.
The document says that if the company plans to use encryption, these funds must be certified by FSB. At the same time it can be obtained only by the technical tools that implement domestic cryptographic algorithms, but they can be supported by neither iOS, nor Android. The cost of using these algorithms is very expensive, for example installing "Crypto CSP" on one computer will cost about two thousand rubles. The document also states that the servers with crypto must be sealed in buildings with bars on the windows at night.Read more
The state plans to oblige Internet companies to store and transmit information about their users to the authorities for the law enforcement requests. Intelligence agencies can receive e-mail addresses, user names, contact lists and other users’ data, but the transference of posts, comments, and personal correspondence is not provided in the document.
Russian Communications Ministry and FSB developed a list of amendments to the legislation, according to which Internet companies will have to transmit user data to law enforcement officials after receiving the request. The document also provides a list of sites that must either wait for receipt of notice from the representatives of law and order, or register in Russian Communications Ministry by itself.Read more