The upper house of Russia's federal legislature has approved amendments to the country's federal data protection law, InformationLawGroup reports. The amendments require businesses that process personal data to conduct threat assessments and examine the effectiveness of data protection safeguards; use only verified data protection methods; implement access controls; log all relevant actions; record incidents of unauthorized access, and implement measures to restore lost, destroyed or damaged data following breaches, the report states. The government will develop regulations for appropriate data protections and requirements for biometric data processing. The report advises that businesses "should be prepared to review and adjust as necessary their privacy and data security practices" as privacy enforcement increases worldwide.
Full Story