Moscow. April 22. INTERFAX.RU – Consents to the processing of personal data by social networks, applications and websites, the requirements for which are approved by Roskomnadzor, will be valid from September 1. The corresponding order of the department was posted on Thursday on the official Internet portal of legal information.
The order is valid for six years – until September 1, 2027.
The consent must contain: full name, contact information (phone number, e-mail address or postal code) of the person who gives it, as well as information about the operator of personal data, the list of which depends on whether he is a legal entity, an individual or an individual entrepreneur.
There should also be a list of sites on which this personal data can be published, the purpose of their processing, categories and a list of personal data that can be processed (personal, special or biometric). There, if desired, a person can indicate which categories of data he establishes a prohibition on processing, as well as restrictions on the method of their transmission. The consent must indicate the period of its validity.
On March 1 of this year, a law came into force prohibiting the dissemination of personal data of citizens without their special consent. It spelled out the procedure for compulsory consent to the processing of personal data of Russians by any operator, processing by default and with the inaction of their owner is prohibited. The owner of the data has the right to revoke his consent at any time, and the operator will have to prove the legality of his actions in the event of a leak. Such consent can be transferred to the operator of personal data both directly and through the information system developed by Roskomnadzor.
On March 23, Roskomnadzor published a draft order on the rules for using the system it is developing, which caused a great public outcry, since it indicated the need to enter passport data for users, which would then be checked through state services. Some media outlets interpreted this as an attempt to introduce registration in social networks of new users with a passport. The department denied this, stressing that the use of their system is voluntary and is not a prerequisite for registration in social networks and instant messengers.
The ministry believes that social networks need a separate regime for regulating work with personal data in terms of obtaining consent, such a bill will be presented in the near future, said the head of the department Maksut Shadayev on April 7.
The point is to simplify the process of identifying users of social networks. At the same time, the problem of the accumulation of a large amount of data by social networks, which they receive in accordance with the new law on compulsory obtaining consent, is being solved, he said. In particular, authorization in social networks through state services is also being discussed, but a prerequisite is the inaccessibility of user data for the social networks themselves, said the head of the Ministry of Digital Science.
