New Legal Risks for Personal Data Operators

The paper analyses amendments to the Federal Law «On Personal Data» that entered into force in 2025. It notes that the reform is systemic in nature and is aimed at substantially tightening the requirements imposed on personal data operators. The principal innovations include the introduction of differentiated administrative fines for data breaches, the amount of which depends on the number of affected data subjects, as well as stricter criminal liability. The paper examines in detail the new requirements for obtaining valid consent to personal data processing: from 1 September 2025, such consent must be executed as a separate document. It also addresses the regulation of data anonymization and the prohibition on cross‑border data transfers prior to the initial storage of data in Russia. The article concludes that the amendments significantly increase legal and financial risks for personal data operators, requiring them to adopt without delay comprehensive organizational and technical measures to bring their activities into compliance with the updated legislation.

1. Badyukov V. F., Dokuchaev M. N. Riski tsifrovoy ekonomiki: osobennosti i perspektivy razvitiya kiberstrakhovaniya v Rossii // Strakhovoe pravo. — 2021. — № 1 (90). — S. 42–44.

2. Bulochnikov S. Yu. O pravotvorchestve i pravovykh novatsiyakh v chasti zashchity ot utechek personalnykh dannykh // Novizna. Eksperiment. Traditsii. — 2025. — № 1. — S. 6–15.

3. Petrova K. A. Zashchita konfidentsialnosti dannykh i prav lichnosti v tsifrovoy srede: pravovoe regulirovanie i prakticheskie mekhanizmy // Nauchnye zapiski molodykh issledovateley. — 2025. — № 2. — S. 46–53.

4. Soglasie na obrabotku personalnykh dannykh s 1 sentyabrya 2025 goda: novye pravila oformleniya i shtrafy do 700 tys. rub. za ikh narushenie // URL: https://www.garant.ru/article/1862510/.

5. Chernyshov K. D. Aktualnye podkhody k obrabotke personalnykh dannykh: analiz i razvitie zakonodatelstva // Vestnik nauki. — 2025. — T. 2. — № 1 (82). — S. 431–435.

6. Shvyryaev P. S. Utechki konfidentsialnykh dannykh: glavnyy vrag vnutri // Gosudarstvennoe upravlenie. Elektronnyy vestnik. — 2022. — № 91. — S. 226–241.

7. Shichanin M. Shtrafy za utechku personalnykh dannykh povysyat do 15 mln rub.: k chemu eshche gotovitsya biznesu? // URL: https://www.garant.ru/article/1746375/.