📋 Tender Overview
The State Duma Committee on State Building and Legislation recommended that the parliamentary chamber expand the list of violations related to the processing of biometric personal data and introduce fines for them. The amendment was approved for the second reading of the bill on the introduction of fines for violating certain requirements of legislation in the field of personal data.
The bill was introduced to the State Duma in December 2023 by a group of senators and deputies along with an initiative to punish the creation of a website for the illegal circulation of personal data. Both documents were adopted in the first reading in January 2024.
According to the text of the amendments, Article 13.11.3. of the Code of Administrative Offenses of the Russian Federation (violation of requirements in the field of placement of biometric personal data) is proposed to be supplemented with new parts. At present, the article provides for administrative liability only for violations in the placement and updating of biometric information in the Unified Identification and Authentication System (USIA). The amendment introduces fines for violating the procedure for processing biometric personal data in the Unified Biometric System (UBS), in the information systems of government agencies, the Central Bank of the Russian Federation or accredited organizations, as well as for failure to comply with the requirements for information technology and technical means used to process such data, for officials in the amount of 100 thousand to 300 thousand rubles and for legal entities - from 500 thousand to 1 million rubles.
In addition, for failure to take the necessary measures to ensure the security of biometric data when processing them in the Unified Biometric System or other information systems that provide authentication using biometrics, officials will face a fine of 300,000 to 500,000 rubles, and legal entities - from 1 million to 1.5 million rubles.
Processing biometric data for authentication in information systems of government agencies, organizations or the Bank of Russia without accreditation or in the event of its suspension or termination will entail a fine for officials in the amount of 500 thousand to 1 million rubles, and for legal entities - from 1 million to 2 million rubles.
