In the Russian Federation, the rules for storing personal data will change from July 1.

The new rules for storing personal data of Russian citizens will come into force on July 1. One of the changes will be a ban on storing this information abroad.

According to information from the amendments to the law "On Personal Data", all work with this kind of information, from collection to deletion, should be carried out only on the territory of the Russian Federation.

Before the law comes into force, personal data operators can transfer databases to foreign developers for analysis. As soon as the new rules come into force, it will be prohibited to record, systematize, accumulate or store such information about Russian citizens using foreign databases.

It is reported that the rules will now apply to information processors as well. Prohibited databases also include analytical tools, such as Google Analytics, HR document management services, CRM systems, and others.

Personal data includes: Full name, together with email address and passport data, residential address, SNILS, INN, marital status, education information, profession, earnings.

"After the amendment comes into force, we can expect closer attention from the regulator to which organizations business (PD operators) assigns the processing of Russians' data. It will become difficult to use foreign services for analytics," said Alexander Kirsanov, head of the MTS Link Legal department, in an interview with RIA Novosti.

Revealed threat: another cyber defense system for citizens will appear in the Russian Federation

How will this affect the information security market and which anti-fraud services already exist?

On June 4, the Department for Combating the Illegal use of information and Communication Technologies of the Ministry of Internal Affairs of the Russian Federation announced that a pilot project was being launched in Russia to quickly identify and block fake websites and applications created to steal confidential information from citizens. The project will run in test mode until March 1, 2026. Its goals are to create an effective measure to protect users from online fraud and to work out the interaction of agencies specializing in this area and the Internet infrastructure.