Vladimir Putin, President of the Russian Federation, has signed changes to Data Protection Law. The law, which will take effect on 1 September 2016, will prohibit the storage of personal data of individuals collected in Russia, including via the Internet, in data centers located outside Russia. This restriction does not apply if storing personal data in foreign data centers is:
- expressly allowed under international treaty or other federal law;
- necessary for the administration of justice or enforcement proceedings (administration of justice by the Russian state courts only; processing personal data necessary for the administration of justice by a foreign court and for foreign enforcement proceedings generally will not be allowed unless a writ of execution is issued by a Russian state court; arbitration proceedings are not deemed as the administration of justice);
- necessary for the provision of public/municipal services by Russian state and municipal authorities; and
- necessary to implement the journalist’s professional activity and (or) the legitimate activities of the mass media or the scientific, literary and creative activities.