๐ Tender Overview
At a plenary session, the State Duma adopted a bill in the second and third readings, which, among other things, expands the list of violations related to the processing of biometric personal data and introduces fines for them.
The relevant provision is contained in the draft law on the introduction of fines for violating certain requirements of the legislation in the field of personal data. The document was submitted to the State Duma in December 2023 by a group of senators and deputies. It was adopted in the first reading in January 2024.
According to the draft law, Article 13.11.3. of the Code of the Russian Federation on Administrative Offenses (violation of requirements in the field of placement of biometric personal data) is supplemented with new parts. At present, the article provides for administrative liability only for violations in the placement and updating of biometric information in the Unified Identification and Authentication System. The document introduces fines for violating the procedure for processing biometric personal data in the Unified Biometric System (UBS), in the information systems of government agencies, the Central Bank of the Russian Federation or accredited organizations, as well as for failure to comply with the requirements for information technology and technical means used to process such data, for officials in the amount of 100 thousand to 300 thousand rubles and for legal entities - from 500 thousand to 1 million rubles.
In addition, for failure to take the necessary measures to ensure the security of biometric data when processing them in the Unified Biometric System or other information systems that provide authentication using biometrics, officials will face a fine of 300,000 to 500,000 rubles, and legal entities - from 1 million to 1.5 million rubles.
Processing biometric data for authentication in information systems of government agencies, organizations or the Bank of Russia without accreditation or in the event of its suspension or termination will entail a fine for officials in the amount of 500 thousand to 1 million rubles, and for legal entities - from 1 million to 2 million rubles.
