So, for example, if a company leaked data again after the law went into effect and violated the regulator’s requirements, then it will face the maximum fine. Interfax writes about this, citing sources.
It is noted that the amount of the fine will depend on the company’s income for the calendar year prior to the year in which the leak occurred. Presumably, the relevant law will enter into force in September 2023.
At the same time, the source of the post, who works in an IT company, indicated that criminals often compile databases that they distribute on the Internet, and therefore their publication does not always mean a violation of the rules for storing data. personal.
It was previously reported that the Ministry of Digital Development proposes to allow Roskomnadzor to conduct unscheduled inspections of reputable IT companies in the event of a leak of your personal data.