All personal data (PD) of Russians from July 1 must be stored and processed within the country: transfer of such data abroad from operators PD to the processors is no longer possible, the relevant amendments to the law "On Personal Data" have entered into force.
Prior to the entry into force of this rule, operators PD could perform all actions with data on servers in Russia, and then transfer the databases for further analysis to foreign processors.
Now it is forbidden. Thus, it is not allowed to record, systematize, accumulate, store, update, modify and extract personal data of Russians using databases located abroad.So, handlers include vendors that provide companies with analytical tools — for example, Google Analytics, HR document management services, CRM systems, and others.
Personal data includes surname, first name, patronymic — in conjunction with e—mail address, phone number or passport data; date and place of birth - in conjunction with full name; residential address, phone number, e-mail address; passport data, TIN, SNILS; photos and information about marital status, education, profession, income. Personal data includes IP address, accounts or location data, as well as biometrics.