Russia's privacy landscape is set to change on 1 September 2022, with the entry into force of the Federal Law of 14 July 2022 No. 266-FZ on Amending the Federal Law on Personal Data ('the Amendment Law'). Amending the Federal Law of 27 July 2006 No. 152-FZ on Personal Data ('the Law on Personal Data'), the Amendment Law introduces new provisions which will enhance data protection for Russian citizens. It also imposes stricter obligations on domestic and foreign data operators in terms of how they interact with data subjects and vendors and, more importantly, how they demonstrate and document their compliance generally and specifically in the case of data transfers. OneTrust DataGuidance breaks these new provisions down, highlighting the key differences between the existing law.

The Assembly of the Representatives, under the Majlisi Oli of the Republic of Tajikistan, recently published a Draft Information Code ('the Draft Code') to provide legal bases for information activities. In contrast to existing legislation, such as the Law of 3 August 2018 No. 1537 on Protection of Personal Data ('the Law on Personal Data'), the Draft Code aims to establish a wide-ranging framework for information relations, encompassing both personal and non-personal data. OneTrust DataGuidance breaks down the key provisions of the Draft Code, featuring insights from Alisher Hoshimov and Amina Nazaralieva, Partner and Paralegal respectively at Centil Law Firm.

The Russian Parliament adopted Bill No. 1176731-7 on Activities of Foreign Undertakings in the Information Telecommunication Network in the Territory of the Russian Federation, dated 17 June 2021 ('the  Law'), aimed at establishing a specific regulatory and legal framework for the activities of foreign (non-Russian) companies operating in the information network (internet) within the Russian Federation. Maxim Boulba and Elena Andrianova, from CMS Russia, provide an overview of the scope of the Law's application, as well as the requirements and sanctions introduced by the Law.