Criminals who sold us on the list face hefty fines and lengthy prison terms. You will have to pay from 300 thousand to two million rubles. Or serve up to ten years. Or – and that and another.
The author of the initiative, Senator Irina Rukavishnikova, previously told reporters that from January to August last year, 197 million records of personal data and payment information were leaked in our country.
According to her, the black market for the sale of personal data is constantly growing. And the products “on the shelves” are provided by unscrupulous employees of the companies. I downloaded the client list, sold it to the side, reloaded my wallet. The scheme is simple and, as many believe, safe. According to the lawyers, today an administrative fine has been established for violating the security of personal data. For citizens – up to four thousand, and for companies – up to 100 thousand rubles.
Of course, there is also a special chapter in the Penal Code that punishes computer crimes. Recently, the plenum of the Russian Supreme Court made extensive clarifications on how to punish him. Breaking into someone else’s phone and downloading personal photos is a crime. Copying a database from a working computer and selling it to the side, in principle, is also under the Criminal Code. But for this you need to take the hand of the seller and the buyer. If such a delicate moment of exchanging a disk for money was left behind, and then personal data ended up on the Internet, then the employee can always excuse himself with his own carelessness. As if he meant no harm, he just pushed the wrong button. Or he missed what and where runs along the wires.
Here are examples from practice. According to experts, from the network of one of the laboratories that does medical tests for money, outsiders downloaded more than 300 gigabytes of information. For this, the court fined the company 60 thousand rubles. Yandex.Food paid the same amount for “draining” customers’ phones and information about their orders.
In the event that the proposed reforms to the Penal Code are approved, the mere fact that, for example, the lists of clients for a service such as “we bring food and wine” are on the Web will be enough to initiate a criminal case. . And the answer will be kept not only by the employees who directly leaked the information, but also by their leaders. Thus, system administrators and their bosses will be fully responsible for the security of information on their office computers.
The government, generally supporting the project, made serious comments on it. It is proposed to end the initiative.
“First of all, it is necessary to explain some rules more clearly,” said Yulia Ramzenkova, a member of the Russian Bar Association. “The term ‘data matrix’ used in the draft does not allow us to determine the amount of information. transmitted and, consequently, delimit the scope of the projected norm”.
He also recalled that on September 1 of last year a law came into force that protects citizens from unreasonable collection of personal data and the imposition of additional services.
“The new regulations prohibit the collection of personal data -phone numbers, email and others- of consumers without a manifest need in the purchase of goods and services -says a member of the AJA-. In addition, it will not be possible to refuse to enter into and perform a contract with a consumer who provides their personal information”.
