An English translation of the Russian Federal Law on Personal Data Protection (pdf 119KB) is now available. The law requires data operators to take "all the necessary organizational and technical measures required for protecting personal data against unlawful or accidental access."
The law's definition of a data operator: a personal data operator is a state body, municipal body, legal entity or an individual that organizes and/or effects processing of personal data and also determines the goals and content of personal data processing.
The Russian Federal Law on Personal Data (No. 152-FZ) was entered into force on July 27, 2006.
This translation is not official. The IAPP makes no warranties, expressed or implied, with regards to the accuracy of the translation.