State bodies and state corporations should be exempted from the obligation to notify Roskomnadzor (RKN) when performing cross-border data transfer. This follows from the government’s response to the draft amendments to the law “On Personal Data”, which was adopted in the first reading at the plenary session of the State Duma on May 24 (published in the electronic database of parliamentary bills).
The bill was developed by a group of deputies headed by Alexander Khinshtein, chairman of the State Duma committee on information policy. It obliges all personal data (PD) operators to inform the RKN of their intention to transfer data to other countries. The regulator will have the right to prohibit the transfer in order to “protect the foundations of the constitutional order, morality, health, rights and ensure the security of the state.”