Personal data protection in Russia in the light of the delegated legislation

Abstract

The recent reforms of the Russian data privacy laws demonstrate the enhancement of personal data protection guarantees and, at the same time, enable to trace a trend towards vesting the lawmaking authority necessary to ensure them in the Federal Supervisory Service for Communications, Information Technology and Mass Media. The regulatory framework including federal laws and delegated legislation is to be considered within the framework of the right to personal data protection, and regard to the constitutional requirements for the delegation of lawmaking authority. The analysis of the legislation entrusting the Federal Supervisory Service for Communications, Information Technology and Mass Media with regulatory powers, as well as the delegated legislation reveals its inconsistency with the principle of legal certainty, which is an essential element for adequate data protection. The Russian delegated legislation in some cases leads to the weakening of the personal data protection guarantees and unjustified restriction of the data controllers’ rights and legal interests.

References

1. Tereshchenko, L.K. (2018). State control in Personal Data Protection. Law. Journal of the Higher School of Economics, 4, pp. 142–161 (in Russ.).
2. Dalla Corte, L. (2020). A Right to a rule: On the substance and essence of the fundamental right to personal data protection. Computers, privacy and data protection. Data protection and Privacy: Data Protection and Democracy, Vol. 12, pp. 27–58.
3. De Hert, P. and Gutwirth, S. (2006). Privacy, data protection and law enforcement. Opacity of the individual and transparency of power. In E. Claes, A. Duff, S. Gutwirth (Eds.). Privacy and the criminal law (pp. 61–104).
4. Tzanou, M. (2013). Data protection as a fundamental right next to privacy? «Reconstructing» a not so new right. International Data Privacy Law, Vol. 3, 2, pp. 88–99.