New draft law: separate registration of consent to the processing of personal data
In July 2024, State Duma deputies proposed important amendments to legislation regarding the protection of personal data.
Draft law No. 679980-8 proposes to issue consent to the processing of personal data as a separate legal document.
The main provisions of the draft law are:
The authors of the bill proposed amendments to Article 9 of the Federal Law “On Personal Data” and 10 of the Law of the Russian Federation “On Consumer Protection”. In particular, the innovation is aimed at excluding consent to the processing of personal data from the general text of contracts and user agreements, which, in their opinion, will help prevent excessive data processing and minimize the risks of unauthorized access.
Ivan Kaisarov, Head of Intellectual Property Practice at Versus.legal, commented to Comnews on this topic.
Ivan noted that in some cases the processing of personal data may be justified under a contract, but it is important that this only concerns data necessary for the performance or conclusion of a contract. The use of such data, for example, for advertising purposes, will already require separate consent: “The practice of separately issuing consent to the processing of personal data was relevant before, since consent is mandatory for voluntary consent. The inclusion of consent in a contract often violates the principle of voluntariness, as the consumer must agree in order to receive a product or service. The new draft law seeks to clearly enshrine this requirement so that it is clearly stated and does not depend on legal interpretation.”
Why is this important?
This proposal could significantly improve the protection of personal information and improve consumers' awareness of their rights.
You can read the full version of the article and detailed comments from our expert at link.