Law note · Russia
Criminal Code Article 272.1, Illegal Collection, Storage, Use, or Transfer of Personal Data
Federal Law No. 421-FZ added Article 272.1 to the Criminal Code, criminalizing illegal collection, storage, use, or transfer of personal data: up to 4 years' imprisonment for the base offense, up to 5 years where minors, special categories, or biometric data are involved, up to 8 years for an unauthorized cross-border transfer, and up to 10 years for an organized group or grave consequences, plus fines to 3 million rubles; a personal or family-use exemption applies.
What it asks of an app
- Expect criminal liability for an individual involved in illegally collecting, storing, using, or transferring personal data of a person in Russia, rising to up to 8 years for an unauthorized cross-border transfer and up to 10 years for an organized group or grave consequences, under Criminal Code Article 272.1.
When LexLint raises it
Declared activities: processes_biometrics, crawls_web, trains_models
Primary source: Consultant.ru, codified text of the Criminal Code of the Russian Federation, Art. 272.1, verified by direct crawler fetch (title metadata matches the cited article)
penalty figures are secondary-sourced (recordinglaw.com, credos.ru), not independently read from the article's own body text