A company hires an employee – and at the same time receives his or her personal data. A small online shop asks the customer for a telephone number for a courier to contact him or her or for the purpose of an advertising mailing – and that’s personal data, too. Penalties for mishandling personal data can be as high as hundreds of thousands or even millions of roubles. Sometimes you can expect reputational losses, as well as lawsuits from victims. In general, hardly any business will not encounter work with personal data at some point. And Roskomnadzor, which monitors compliance with the law in this area, will not move on from breaches.
Vera Zotova, a Senior Associate in the Intellectual Property and Information Technology Practice at Nordic Star Law Offices, commented to online legal resource Pravo.RU on when a consultant’s help is needed in organizing the process of dealing with personal data.