News

Liability for Violating User Authentication Requirements

Publications
A draft federal law has been submitted to the State Duma of the Russian Federation establishing administrative liability for website owners who fail to implement certain mandatory user authorization methods.

These requirements apply to website owners who:

  • are Russian legal entities or Russian citizens;

  • carry out activities on the Internet within the territory of the Russian Federation;

  • provide access to their websites for authorized users.

Liability will arise if the website lacks at least one of the following authentication mechanisms:

  • authorization using a mobile telephone number;

  • authorization through the Unified System of Identification and Authentication or the Unified Biometric System;

  • authorization via a Russian authorization service that complies with information-security requirements and limits on foreign participation.

For legal entities, administrative fines will range from RUB 500,000 to 700,000.

According to the authors of the bill, the primary objective is to ensure the independence of the domestic Internet.

We will continue monitoring the bill as it proceeds through the legislative review process.