On July 1, 2017, the new amendments to the Russian Code of Administrative Offences (CAO) from February 7th will come into force. Not only will these amendments significantly expand the list of offenses compositions in the field of personal data, but also they will increase the size of the administrative penalties. It is worth noting that the current wording of Article 13.11 of CAO that stipulates the responsibility for violations in the area of personal data contains only a collective term of «a violation of the procedure of collection, storage, use or dissemination of information on citizens (personal data)». This transgression is subject to an official warning or an imposition of an administrative fine in the amount of 300-500 rubles (for individuals) and 5000-10000 rubles (for legal entities). The new wording of Article 13.11 of the CAO a violation of Russian legislation in the field of personal data takes place in several ways: – processing of personal data in cases not governed by the Russian legislation, or processing of personal data that is incompatible with the purposes of collecting personal data, if it is not a criminal act (will result in a warning or a fine of up to 50,000 rubles); – processing of personal data without the subject’s written consent or contrary to the requirements for the composition of the information included in the consent to the processing of personal data (will cause a warning or a fine of up to 70,000 rubles); – failure to comply with the obligation to publish or to provide unrestricted access to the document that defines the policy of the operator in relation to processing of personal data or information about ongoing requirements for personal data protection (entails a warning or a fine of up to 30,000 rubles); – failure to comply with the obligation to provide the subject of personal data with the information relating to processing of his personal data (will cause a warning or a fine of up to 40,000 rubles). In addition, an administrative liability attaches to an operator in the case of failure to fulfill a subject’s requirements to specify, block or delete incomplete, outdated or illegally obtained personal data. Besides that, an official body of a state or municipal authority shall be liabale to a warning of a fine the amount from 3000 to 6000 rubles in case of exposing personal data. Thus, the responsibility for administrative violations in the field of personal data will be largely determined by nature of a violation and in some cases its maximum size will increase by seven times compared to present time.