On July 9, 2014, Russia’s Council of the Federation (the upper chamber of the Russian Parliament) approved Bill No. 553424-6 amending Russia’s existing laws on privacy, information technology and protection of information. Media reports indicate that the bill, which had been adopted by the lower chamber of the Russian Parliament on July 3, 2014, was signed into law by President Vladimir Putin. The Russian law firm ALRUD reports that the law creates a new obligation to store personal data of Russian citizens only in Russia, meaning that companies located outside Russia “will be forced to place their servers within Russia if they plan to continue making business in the market.”
The new law will come into force on September 1, 2016.