FEDERAL LAW OF THE RUSSIAN FEDERATION

of February 28, 2025 No. 23-FZ

About introduction of amendments to the Federal law "About Personal Data" and separate legal acts of the Russian Federation

Accepted by the State Duma on February 18, 2025

Approved by the Federation Council on February 26, 2025

Article 1

Bring in the Federal Law of July 27, 2006 No. 152-FZ "About personal data" (The Russian Federation Code, 2006, No. 31, Art. 3451; 2011, No. 31, Art. 4701; 2013, No. 14, Art. 1651; No. 51, Art. 6683; 2014, No. 30, Art. 4243; 2016, No. 27, Art. 4164; 2017, No. 27, Art. 3945; No. 31, Art. 4772; 2020, No. 17, Art. 2701; 2021, No. 1, Art. 54, 58; No. 27, Art. 5159; 2022, No. 29, Art. 5233; 2024, No. 33, Art. 4929) following changes:

1) Article 6 to add with part 1.2 following of content:

"1.2. Processing of personal data of staff of bodies of the Federal Security Service, the persons who are rendering or rendering them assistance on confidential basis, subject to the state protection of judges, officials of law enforcement and monitoring bodies, the staff of bodies of foreign intelligence of the Russian Federation, the persons rendering or rendering them assistance on confidential basis, the staff of bodies of the state protection, persons who are rendering or rendering them assistance on confidential basis, subject to the state protection of the victims, witnesses and other participants of criminal trial, the staff of the law-enforcement bodies, persons rendering or rendering them assistance on confidential basis is performed taking into account the features provided respectively by the Federal Law of April 3, 1995 No. 40-FZ "About the Federal Security Service" The Federal Law of April 20, 1995 No. 45-FZ "About the state protection of judges, officials of law enforcement and monitoring bodies", the Federal Law of January 10, 1996 No. 5-FZ "About foreign intelligence", the Federal Law of May 27, 1996 No. 57-FZ "About the state protection", the Federal Law of August 20, 2004 No. 119-FZ "About the state protection of the victims, witnesses and other participants of criminal trial", the Federal Law of February 7, 2011 No. 3-FZ "About police".";

Part 5 of Article 18 to state 2) in the following edition:

"5. In case of collection of personal data, including by means of the Internet, record, systematization, accumulating, storage, refining (updating, change), extraction of personal data of citizens of the Russian Federation with use of the databases which are outside the territory of the Russian Federation are not allowed, except as specified, 8 parts 1 of article 6 of this Federal Law specified in Items 2, of 3, of 4,.";

Article 19 to add 3) with part 15 of the following content:

"15. The operator shall process personal data of staff of bodies of the Federal Security Service, the persons who are rendering or rendering them assistance on confidential basis, subject to the state protection of judges, officials of law enforcement and monitoring bodies, the staff of bodies of foreign intelligence of the Russian Federation, the persons rendering or rendering them assistance on confidential basis, objects of the state protection and members of their families, the staff of bodies of the state protection, the persons who are rendering or rendering them assistance on confidential basis, subject to the state protection of the victims, witnesses and other participants of criminal trial, the staff of the law-enforcement bodies, persons rendering or rendering them assistance on confidential basis taking into account the requirements provided respectively by the Federal Law of April 3, 1995 No. 40-FZ "About the Federal Security Service" The Federal Law of April 20, 1995 No. 45-FZ "About the state protection of judges, officials of law enforcement and monitoring bodies", the Federal Law of January 10, 1996 No. 5-FZ "About foreign intelligence", the Federal Law of May 27, 1996 No. 57-FZ "About the state protection", the Federal Law of August 20, 2004 No. 119-FZ "About the state protection of the victims, witnesses and other participants of criminal trial", the Federal Law of February 7, 2011 No. 3-FZ "About police".".

Article 2

The law of the Russian Federation of April 15, 1993 No. 4802-I "About the status of the capital of the Russian Federation" (Sheets of the Congress of People's Deputies of the Russian Federation and the Supreme Council of the Russian Federation, 1993, No. 19, the Art. 683) to add with article 19 of the following content:

"Article 19. Features of provision of access to the information systems and (or) databases of the city of Moscow containing personal data of separate categories of persons

Provision to bodies of the Federal Security Service, bodies of foreign intelligence of the Russian Federation, bodies of the state protection, law-enforcement bodies of access to information systems and (or) databases of state bodies of the city of Moscow, local government bodies, the public and local government offices and other organizations to which implementation in the city of Moscow of publicly significant functions is assigned, containing personal data of staff of bodies of the Federal Security Service, the persons rendering or rendering them assistance on confidential basis, who are subject to the state protection of judges, officials of law enforcement and monitoring bodies, the staff of bodies of foreign intelligence of the Russian Federation, the persons rendering or rendering them assistance on confidential basis, objects of the state protection and members of their families, the staff of bodies of the state protection, persons the victims rendering or rendering them assistance on confidential basis, subject to the state protection, witnesses and other participants of criminal trial, the staff of the law-enforcement bodies, persons rendering or rendering them assistance on confidential basis, for the purpose of safety containing in the specified information systems and databases of such personal data it is performed according to the procedure, established by agreements between federal executive body in the field of safety, federal executive body in the field of foreign intelligence, federal executive body in the field of defense, federal executive body in the field of the state protection, federal executive body in the field of internal affairs and the management official of the city of Moscow.".

Article 3

Bring in the Federal Law of April 3, 1995 No. 40-FZ "About the Federal Security Service" (The Russian Federation Code, 1995, No. 15, Art. 1269; 2000, No. 1, Art. 9; 2003, No. 2, Art. 156; No. 27, Art. 2700; 2006, No. 17, Art. 1779; No. 31, Art. 3452; 2007, No. 31, Art. 4008; 2008, No. 52, Art. 6235; 2010, No. 31, Art. 4207; 2011, No. 29, Art. 4282; No. 50, Art. 7366; 2013, No. 19, Art. 2324; No. 27, Art. 3477; No. 51, Art. 6689; 2014, No. 19, Art. 2335; 2016, No. 1, Art. 88; 2018, No. 11, Art. 1591; 2019, No. 49, Art. 6963; 2022, No. 45, Art. 7672; 2023, No. 32, Art. 6172; 2024, No. 1, Art. 20; No. 33, Art. 4945) following changes:

1) in Article 13 part one:

a) add the Item "t" with words ", and also on information security about activities of bodies of the Federal Security Service and the information about the staff of bodies of the Federal Security Service";

b) state the Item "f" in the following edition:

"t) use documents of other ministries, departments, companies, organizations and organizations for the purpose of encoding of information about the staff of bodies of the Federal Security Service, departmental accessory of their divisions, rooms and vehicles and to process the information about the staff of bodies of the Federal Security Service containing in information systems and (or) databases;";

Article 17 to state 2) in the following edition:

"Article 17. Legal protection of staff of bodies of the Federal Security Service

Staff of bodies of the Federal Security Service on duty is representatives of federal bodies of the government and is under protection of the state. Nobody, except the state bodies and officials authorized on that by the Federal Laws having the right to interfere with their office activities.

Hindrance to execution by the employee of bodies of the Federal Security Service of service duties, the insult, resistance, violence or threat of use of violence in relation to it in connection with execution by the specified employee of service duties involve responsibility, stipulated by the legislation the Russian Federation.

Protection of life and health, honor and advantage, and also property of the employee of bodies of the Federal Security Service and members of his family from criminal encroachments in connection with execution of service duties by him is performed according to the procedure, stipulated by the legislation the Russian Federation.

In case of execution by the employee of bodies of the Federal Security Service of service duties its drive, detention, personal inspection and examination of its things, and also examination of the personal and used by it transport without official representative of bodies of the Federal Security Service or the judgment are not allowed.

Information about the staff of the bodies of the Federal Security Service performing (performing) special tasks in special services and the organizations of foreign states, in criminal groups is the state secret and can be made public only from written consent of the specified employees and in the cases provided by the Federal Laws.

For the purpose of safety containing in information systems and (or) databases of information about the staff of bodies of the Federal Security Service, persons rendering or rendering them assistance on confidential basis, persons to whom bodies of the Federal Security Service apply measures of the state protection body of the Federal Security Service has the right to send to the owner of information system and (or) the database the instruction, obligatory for execution, about provision of access to the corresponding information systems and (or) databases for processing of the personal data of the employees and persons specified in this part containing in them, and also entering into information systems and (or) databases of earlier not considered personal data of the employees and persons specified in this part. The form of such instruction, procedure for provision of access to the corresponding information systems and (or) databases, processings of the personal data of the employees and persons specified in this part containing in them are established by joint regulatory legal act of federal executive body in the field of safety, federal executive body in the field of foreign intelligence, federal executive body in the field of defense, federal executive body in the field of the state protection, federal executive body in the field of internal affairs. The list of officials of bodies of the Federal Security Service who have the right to get access to personal data of the employees and persons specified in this part and to perform processing of such personal data, it is determined by the head of federal executive body in the field of safety. Obligation on preserving the processed personal data of the employees and persons specified in this part, and responsibility for unauthorized use or loss of personal data of the employees and persons specified in this part are assigned to person which performed their processing.

The measures of legal protection specified in this Article extend also to the military personnel undergoing military service in bodies of the Federal Security Service.".

Article 4

Bring in the Federal Law of April 20, 1995 No. 45-FZ "About the state protection of judges, officials of law enforcement and monitoring bodies" (The Russian Federation Code, 1995, No. 17, Art. 1455; 2021, No. 1, Art. 54; No. 27, Art. 5116) following changes:

1) in part two of Article 6 of the word", numbers of their phones and the state registration signs of the vehicles used by them can be replaced" to exclude;

2) in Article 9:

a) state part one in the following edition:

"In the presence of threat of infringement of life, health and property of protected persons the body ensuring safety imposes temporary ban on distribution of information containing personal data of protected persons, issue of the personal data of protected persons, including data on their property, subscriber numbers of their phones which are at the operator about the vehicles belonging to them and (or) used by them, except as specified, if such data become clear in accordance with the established procedure in connection with criminal proceeding. If necessary subscriber numbers of phones of protected persons and the state registration signs of the vehicles belonging to them and (or) used by them can be replaced. Ensuring confidentiality of information containing personal data of protected persons, including data on their property, on subscriber numbers of their phones about the vehicles belonging to them and (or) used by them, is performed by the operator based on the decision of the body ensuring safety, according to the procedure, established by the Government of the Russian Federation.";

b) in part two the fifth offer to state in the following edition: "At the same time the ban on distribution of information containing personal data of such persons, issue of the personal data of such persons, including data on their property, on subscriber numbers of their phones which are at the operator about the vehicles belonging to them and (or) used by them, except as specified the consent of such persons to their distribution or issue, clarification of these data in accordance with the legislation of the Russian Federation on anti-corruption, about operational search activities or in connection with criminal proceeding, and also according to the procedure of civil and (or) administrative legal proceedings can be imposed." shall be replaced with words the words "in Items 1 - 10" "in Items 1 - 5, 6.1, 6.3, 6.5, 6.7, 7, 8.2 - 10", shall be replaced with words the words "in Item 11" "in Items 6, 6.6 and 11".

Article 5

Item 4 of part one of article 15 of the Federal Law of August 12, 1995 No. 144-FZ "About operational search activities" (The Russian Federation Code, 1995, No. 33, Art. 3349; 2008, No. 52, Art. 6248; 2012, No. 49, Art. 6752; No. 51, the Art. 6689) to add 2013, with words ", with introduction in need of corresponding changes into information systems and (or) databases".

Article 6

Bring in the Federal Law of January 10, 1996 No. 5-FZ "About foreign intelligence" (The Russian Federation Code, 1996, No. 3, Art. 143; 2011, No. 50, Art. 7366; 2016, No. 28, Art. 4558; 2018, No. 11, Art. 1591; 2019, No. 49, Art. 6963; 2023, No. 32, Art. 6172) following changes:

Item 3 parts one of Article 6 to state 1) in the following edition:

"3) use for the purpose of conspiracy and ensuring the state protection of the documents ciphering the information about employees of personnel structure, departmental accessory of divisions, organizations, rooms and vehicles of bodies of foreign intelligence of the Russian Federation, and processing of the specified data containing in information systems and (or) databases;";

To add 2) with Article 19.1 of the following content:

"Article 19.1. Features of processing of personal data of staff of bodies of foreign intelligence of the Russian Federation and separate categories of persons

For the purpose of safety containing in information systems and (or) databases of information about the staff of bodies of foreign intelligence of the Russian Federation, persons rendering or rendering them assistance on confidential basis, persons to whom bodies of foreign intelligence of the Russian Federation apply measures of the state protection body of foreign intelligence of the Russian Federation has the right to send to the owner of information system and (or) the database the instruction, obligatory for execution, about provision of access to the corresponding information systems and (or) databases for processing of the personal data of the employees and persons specified in this Article containing in them, and also entering into information systems and (or) databases of earlier not considered personal data of the employees and persons specified in this Article. The form of such instruction, procedure for provision of access to the corresponding information systems and (or) databases, processings of the personal data of the employees and persons specified in this Article containing in them are established by joint regulatory legal act of federal executive body in the field of foreign intelligence, federal executive body in the field of defense, federal executive body in the field of safety, federal executive body in the field of the state protection, federal executive body in the field of internal affairs. The list of officials of bodies of foreign intelligence of the Russian Federation who have the right to get access to personal data of the employees and persons specified in this Article and to perform processing of such personal data, it is determined by the head of body of foreign intelligence of the Russian Federation. Obligation on preserving the processed personal data of the employees and persons specified in this Article, and responsibility for unauthorized use or loss of personal data of the employees and persons specified in this Article are assigned to person which performed their processing.".

Article 7

Bring in the Federal Law of May 27, 1996 No. 57-FZ "About the state protection" (The Russian Federation Code, 1996, No. 22, Art. 2594; 2011, No. 50, Art. 7366; 2017, No. 27, Art. 3945; 2018, No. 11, Art. 1591; 2019, No. 49, Art. 6963; 2020, No. 14, Art. 2022; 2023, No. 32, Art. 6172; 2024, No. 33, Art. 4967) following changes:

1) in Article 15:

a) state subitem 13 in the following edition:

"13) to use documents of other federal bodies of the government, public authorities of subjects of the Russian Federation, local government bodies, organizations for the purpose of ensuring the state protection, including encoding, the information about the staff of bodies of the state protection, departmental accessory of their divisions, rooms and vehicles and to process the information about the staff of bodies of the state protection containing in information systems and (or) databases;";

b) state subitem 14.1 in the following edition:

"14. 1) to take measures for personal data protection of objects of the state protection and members of their families, including by the direction to owners of information systems and (or) databases of instructions, obligatory for execution, about provision of access to the information systems and (or) databases containing data on objects of the state protection and on members of their families, for the purpose of processing containing in them personal data of specified persons and also entering into information systems and (or) databases of earlier not considered personal data of specified persons. The form of such instruction, procedure for provision of access to the corresponding information systems and (or) databases, processings of the personal data of objects of the state protection containing in them and members of their families are established by joint regulatory legal act of federal executive body in the field of the state protection, federal executive body in the field of safety, federal executive body in the field of foreign intelligence, federal executive body in the field of defense, federal executive body in the field of internal affairs. The list of officials of bodies of the state protection, authorized to get access to personal data of specified persons and to perform processing of such personal data, it is determined by the head of federal executive body in the field of the state protection. Obligation on preserving the processed personal data of objects of the state protection and members of their families and responsibility for unauthorized use or loss of personal data of objects of the state protection and members of their families are assigned to person which performed their processing. Processing of personal data of objects of the state protection and members of their families is performed from their consent and (or) with the consent of bodies of the state protection, except for the personal data which are subject to publication or obligatory disclosure according to the Federal Laws;";

To add 2) with Article 19.3 of the following content:

"Article 19.3. Features of processing of personal data of staff of bodies of the state protection and separate categories of persons

For the purpose of safety containing in information systems and (or) databases of information about the staff of bodies of the state protection, persons rendering or rendering them assistance on confidential basis, persons to whom bodies of the state protection apply measures of the state protection body of the state protection has the right to send to the owner of information system and (or) the database the instruction, obligatory for execution, about provision of access to the corresponding information systems and (or) databases for processing of the personal data of the employees and persons specified in this Article containing in them, and also entering into information systems and (or) databases of earlier not considered personal data of the employees and persons specified in this Article. The form of such instruction, procedure for provision of access to the corresponding information systems and (or) databases, processings of the personal data of the employees and persons specified in this Article containing in them are established by joint regulatory legal act of federal executive body in the field of the state protection, federal executive body in the field of safety, federal executive body in the field of foreign intelligence, federal executive body in the field of defense, federal executive body in the field of internal affairs. The list of officials of bodies of the state protection who have the right to get access to personal data of the employees and persons specified in this Article and to perform processing of such personal data, it is determined by the head of federal executive body in the field of the state protection. Obligation on preserving the processed personal data of the employees and persons specified in this Article, and responsibility for unauthorized use or loss of personal data of the employees and persons specified in this Article are assigned to person which performed their processing.".

Article 8

Bring in the Federal Law of August 20, 2004 No. 119-FZ "About the state protection of the victims, witnesses and other participants of criminal trial" (The Russian Federation Code, 2004, No. 34, Art. 3534; 2010, No. 15, Art. 1741; 2013, No. 51, Art. 6697; No. 52, Art. 6997; 2015, No. 10, Art. 1393; 2017, No. 7, Art. 1026; 2021, No. 27, Art. 5116) following changes:

Part 1 of Article 9 to state 1) in the following edition:

"1. According to the decision of the body performing security measures the ban on distribution of information containing personal data of the protected person, issue of the personal data of the protected person, including data on subscriber numbers of its phones, on the state registration signs of the vehicles belonging to it and (or) used by it which are at the operator can be imposed. If necessary subscriber numbers of phones of the protected person and the state registration signs of the vehicles belonging to it and (or) used by it can be replaced.";

Part 4 of Article 10 to state 2) in the following edition:

"4. In exceptional cases when safety of the protected person cannot be ensured other measures, to it identity documents, and other documents with the changed biographical particulars can be issued, and also change of appearance of the protected person according to the procedure, established by the Government of the Russian Federation can be made.".

Article 9

Bring in the Federal Law of February 7, 2011 No. 3-FZ "About police" (The Russian Federation Code, 2011, No. 7, Art. 900; No. 27, Art. 3881; 2013, No. 26, Art. 3207; No. 27, Art. 3477; 2014, No. 6, Art. 566; No. 42, Art. 5615; 2016, No. 27, Art. 4160, 4238; 2017, No. 31, Art. 4821; No. 50, Art. 7562; 2018, No. 1, Art. 26; No. 11, Art. 1591; No. 32, Art. 5076; 2019, No. 42, Art. 5802; No. 49, Art. 6963; 2021, No. 1, Art. 4; No. 15, Art. 2447; No. 52, Art. 8983; 2023, No. 1, Art. 16; No. 32, Art. 6172; 2024, No. 33, Art. 4928, 4956; No. 53, 8528) following changes:

"The state information systems and (or) databases of state bodies and state non-budgetary funds" shall be replaced with words 1) in Item 10 of part 1 of Article 13 of the word "information systems and (or) databases";

Article 30 to add 2) with part 8 of the following content:

"8. For the purpose of safety containing in information systems and (or) databases of information about the staff of the law-enforcement bodies, persons rendering or rendering assistance to police on confidential basis, persons to whom law-enforcement bodies apply measures of the state protection police has the right to send to the owner of information system and (or) the database the instruction, obligatory for execution, about provision of access to the corresponding information systems and (or) databases for processing of the personal data of the employees and persons specified in this part containing in them, and also entering into information systems and (or) databases of earlier not considered personal data of the employees and persons specified in this part. The form of such instruction, procedure for provision of access to the corresponding information systems and (or) databases, processings of the personal data of the employees and persons specified in this part containing in them are established by joint regulatory legal act of federal executive body in the field of internal affairs, federal executive body in the field of safety, federal executive body in the field of foreign intelligence, federal executive body in the field of defense, federal executive body in the field of the state protection. The list of officials of police who have the right to get access to personal data of the employees and persons specified in this part and to perform processing of such personal data, it is determined by the head of federal executive body in the field of internal affairs. Obligation on preserving the processed personal data of the employees and persons specified in this part, and responsibility for unauthorized use or loss of personal data of the employees and persons specified in this part are assigned to person which performed their processing.".

Article 10

1. This Federal Law becomes effective since July 1, 2025.

2. Agreements, the stipulated in Article 19 Laws of the Russian Federation of April 15, 1993 No. 4802-I "About the status of the capital of the Russian Federation", shall be signed no later than December 31, 2025.

 

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info