The current version of the project contains too vague wording, which could even lead to the developers being held liable.
What's happened: Big Data Association(ABD) suggested that deputies revise the wording in the draft law on criminal liability when working with personal data. Currently, the text of the draft can be interpreted very broadly, because of this, any website owner or AI developer can be punished.
What bill: this concerns amendments to the Criminal Code that toughen penalties for working with illegally obtained personal data. Fines of up to 700 thousand rubles and imprisonment for up to five years are proposed for businesses, and if the consequences of using the data are serious, the fine will increase to 3 million rubles and the imprisonment term will be up to 10 years. The bill is currently under consideration in the State Duma.
What the companies asked for: ABD proposes to introduce into the law a formulation viber database about the obviously illegal collection and use of personal data in order to punish those who steal and sell databases and protect from criminal liability those who gained access to data by accident.
The association also proposed eliminating liability for employees of information security departments and expert institutions that study data leaks in order to better protect the company's information resources.