INSTRUCTION OF CENTRAL BANK OF THE RUSSIAN FEDERATION

of August 30, 2023 No. 6515-U

About determination of safety hazards when processing personal data in the automated information system of insurance

This Instruction based on part 5 of article 19 of the Federal Law of July 27, 2006 No. 152-FZ "About personal data" and the subitem 6 of Item 7 of article 33.10 of the Law of the Russian Federation of November 27, 1992 No. 4015-I "About the organization of insurance case in the Russian Federation" determines safety hazards when processing personal data in the automated information system of insurance.

1. Safety hazards when processing personal data in the automated information system of insurance (further - insurance AIS) are:

integrity violation threats (substitutions, removals), the violations of confidentiality (compromise) of personal data urgent in case of transfer of personal data between devices of users of AIS of insurance - physical persons and AIS of insurance, including by realization of purposeful actions with use of the opportunities specified in Item 10 of Structure and content of organizational and technical measures for safety of personal data in case of their processing in information systems of personal data with use of the means of cryptographic information security necessary for accomplishment of the requirements to personal data protection established by the Government of the Russian Federation for each of the levels of security approved by the order of Federal Security Service of the Russian Federation of July 10, 2014 No. 378 <1> (further - Structure and content of organizational and technical measures);

--------------------------------

<1> Registration No. 33620 is registered by the Ministry of Justice of the Russian Federation on August 18, 2014.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info