The government submitted the bill to the State Duma

[tanjimajuha20]

Bill No. 992331-7 "On Amendments to the Federal Law "On Personal Data" provides for the establishment of the procedure for depersonalizing personal data and the procedure for obtaining consent for their processing. The document also proposes to clarify the powers of Roskomnadzor to approve the requirements and methods for depersonalizing personal data.

As stated in the explanatory czech republic whatsapp resource note, the bill is aimed at "ensuring favorable legal conditions for the collection, storage and processing of data using new technologies, in terms of establishing the procedure for depersonalizing personal data, the procedure for obtaining consent for their processing, as well as regulating the circulation of large volumes of data, taking into account the need to protect the rights and freedoms of man and citizen when processing his personal data."

for consideration back in 2020. Vladimir Putin ordered that the document be adopted in the second and third readings already in the autumn session.

Lawyer, economist, member of the Committee of the Chamber of Commerce and Industry of the Russian Federation on Entrepreneurship in the Sphere of Media Communications Pavel Katkov explained what the main changes to the bill are: "The most significant changes are contained in paragraphs 9 and 10 of the bill. Paragraph 9 includes a provision that now the measures to ensure personal data also include the use of personal data by the operator. In simple terms, the data must be destroyed efficiently, without the possibility of further storage and leakage. Paragraph 10 supplements Federal Law No. 152 with a provision that "The authorized body for the protection of the rights of personal data subjects establishes requirements for the depersonalization of personal data and methods for depersonalizing personal data." This means that we should expect a by-law on this topic from Roskomnadzor. Given the level of introduction - the head of state - the bill will most likely be signed before the end of 2023."

Kirill Lyakhmanov, Chief Legal Advisor of the Intellectual Property Practice at the EBR Law Firm, believes that legalizing the depersonalization of personal data (PD) by commercial organizations does not solve existing privacy issues. "Such data could replace excess PD collected by businesses: this would increase the level of privacy of individuals. In the current reality, depersonalized data will become an additional source of information about citizens. An alternative could also be the ability to provide access to data marts containing general (statistical) information about PD subjects - this would allow, without affecting the level of privacy, to provide businesses and the state with the necessary information about citizens," noted Kirill Lyakhmanov.

Since 2020, there have been discussions about the exact procedure for depersonalization of data. The bill proposes to provide the subject with the opportunity to indicate several processing purposes at once in their consent to data processing and thus receive permission for depersonalization. "Currently, the law provides for only one possibility for depersonalization - if the processing purposes have been achieved or the need to achieve these purposes has been lost. Now the state wants to be able to use depersonalized data without waiting for this. It will be possible to assess the risks for the user when the depersonalization procedure becomes known," added media lawyer and author of the telegram channel "Kuzevanova tells" Svetlana Kuzevanova.

In addition, the changes in the bill will also affect organizations working with personal data of citizens, primarily mobile operators. "The changes affect telecom operators, to a greater extent they affect areas of work with big data," commented a representative of the Tele2 press service. MTS, VimpelCom and MegaFon did not answer questions from a ComNews correspondent.