Anti-terrorist amendments to the legislation that received its fame as the “Spring package” and binding operators to store information on conversations and correspondence of the users can lead the Russian cellular company to large fines for violations of European laws. To such conclusion analysts of the research Institute of the Internet, who have studied (.pdf) new European Union regulations on data protection. The attention it drew to “Vedomosti”.
New amendments to the EU rules on data storage take effect in may 2018. They involve the selective storage of data only some users in order to ensure national security and the rule of law. To store information about the facts of the communication user must be a confirmation from the security services. Also the European regulation obliges mobile operators within 72 hours to report a data breach.
These provisions run counter to the “Spring package”, in which no restrictions or prohibitions on the storage of traffic of foreign citizens and subjects. If Russian operators will hold information on foreigners on servers without the consent of the user and without a court order to provide this information to the Russian law enforcement bodies will be violated European law.
According to the analyst of the Russian Association of electronic communications Karen Ghazaryan, such precedents will be inevitable, because live in Russia and use local services to European citizens, and the Russians themselves frequently correspond and talk with subscribers from Europe.
As calculated in the Institute for the study of the Internet, breaches of the European regulation could cost Russian operators of €20 million, or 4% of total revenue for the year, depending on which quantity is greater. According to estimates of “Vedomosti”, the total penalty for the four major Russian operators will amount to about 45 billion rubles.
As noted by the partner of the consulting Agency in the field of information security “emelyannikov, Popova and partners,” Mikhail emelyannikov, the European regulation will be binding in the Russian cellular companies if the operators work in EU countries. He explained that in this case, the Russian operator can obtain data from European companies which subscriber is residing on the territory of Russia a foreign citizen, for processing.