INSTRUCTION OF CENTRAL BANK OF THE RUSSIAN FEDERATION

of October 28, 2025 No. 7220-U

About modification of the Provision of the Bank of Russia of August 17, 2023 No. 821-P

Based on part 3 of article 27 of the Federal Law of June 27, 2011 No. 161-FZ "About national payment system":

1. Bring in the Provision of the Bank of Russia of August 17, 2023 No. 821-P "About requirements to ensuring information security when implementing money transfers and about procedure the Bank of Russia of control of observance of requirements to ensuring information security when implementing money transfers" <1> following of change:

--------------------------------

<1> It is registered by the Ministry of Justice of the Russian Federation on December 6, 2023, registration No. 76286.

1.1. In Item 1.1:

the paragraph one to state in the following edition:

"1.1. Operators on money transfer, bank payment agents (subagents), operators of services of information exchange, operators of services of payment infrastructure, operators of electronic platforms for the purpose of implementation of requirements to ensuring information security when implementing money transfers, including implementation of the money transfers initiated with use of biometric personal data of clients of operators on money transfer including acceptance and information transfer about the identifier of electronic instrument of payment of clients of operators on money transfer for the purpose of implementation of the money transfers initiated with use of biometric personal data of clients of the operators on money transfer (further - requirements to ensuring information security) applied concerning the automated systems, the software, computer aids, the telecommunication equipment which operation and use are provided when implementing money transfers by operators on money transfer (further - objects of information infrastructure), shall:";

add with the paragraph of the following content:

"Operators on money transfer, bank payment agents (subagents), operators of services of information exchange, operators of services of payment infrastructure in case of combination of activities with activities of credit institution, the foreign bank performing activities in the territory of the Russian Federation through the branch (further - branch of foreign bank), not credit financial credit institution, and forming according to Item 6.7 of Section 6 state standard specification P 57580.1-2017, shall apply information measures of protection by means of which accomplishment realization of the highest level of information security, stipulated in Item 6.7 Sections 6 state standard specifications P 57580.1-2017, from the provided this Item and regulations of the Bank of Russia establishing based on Articles 57 is provided to objects of information infrastructure of one contour of safety. 4, 76.4-1 Federal Law of July 10, 2002 No. 86-FZ "About the Central bank the Russian Federation (Bank of Russia)" (further - the Federal Law of July 10, 2002 No. 86-FZ) requirements to ensuring information security for credit institution, branch of foreign bank, not credit financial credit institution.".

1.2. Add with Item 1.1 (1) the following content:

"1.1 (1). Operators on money transfer, the operators of services of payment infrastructure, operators of electronic platforms who are operators of financial platforms, operators of information systems in which release of digital financial assets, operators of exchange of digital financial assets, the Provisions of the Bank of Russia obliged to observe the standard level of information security according to subitem 1.4.3 of Item 1.4 of April 20, 2021 No. 757-P "About establishment of requirements to ensuring information security, obligatory for not credit financial credit institutions, when implementing activities in the field of the financial markets for the purpose of counteraction to implementation of illegal financial transactions" is performed <1> (further respectively - the operators of electronic platforms obliged to observe the standard level of information security, the Provision of the Bank of Russia of April 20, 2021 No. 757-P) shall carry out assessment of fulfillment of requirements to ensuring information security, the technological measures of protection of information applied with use and applied concerning application software of the automated systems and appendices of operators on money transfer, operators of services of payment infrastructure, operators of electronic platforms according to Items 2. 3, 6.7 and 7.7 this provision.";

add with footnote of 1 following content:

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info