RussiaCriminal Code Article 274, Violation of Rules for Operating Computer-Information Storage, Processing or Transmission Systems
Criminal Code of the Russian Federation, Art. 274 (No. 63-FZ, 1996)
In force since .
A computer misuse rule binding public and private bodies.
- Obligation class
- Access restriction, Security
- Audit expectation
- none
What it requires
- Do not violate the operating rules for protected computer-information systems or telecommunications-network access rules in a way that destroys, blocks, modifies, or copies information and causes significant damage, under Criminal Code Article 274.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
- NIST AI 600-1
- GAI-RISK-09Information Security
- GAI-RISK-12Value Chain and Component Integration
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI03Identity and Privilege Abuse
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-018Agent Authority Least Privilege Framework
- AIR-PREV-023Agentic System Credential Protection Framework
- ETSI EN 304 223
- 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Base offense: a fine up to 500,000 rubles (or income for up to 18 months), corrective labor 6 months to 1 year, restriction of freedom up to 2 years, forced labor up to 2 years, or imprisonment up to 2 years. Where it caused grave consequences or the threat of them: forced labor up to 5 years or imprisonment up to 5 years.
Penalty structure
Base offense carries a fine up to 500,000 rubles alongside corrective labor, restriction of freedom, forced labor, or imprisonment up to 2 years; the grave-consequences tier carries forced labor or imprisonment up to 5 years with no separate fine.
- Rule
- Fixed only
- As of
- Currency
- RUB
- Fixed cap
- 500,000
What it makes you log
Logging duty
Article 274 punishes breaking the operating and access rules for computer information systems and networks where that destroys, blocks, modifies or copies computer information and causes major damage. The offence refers to rules set elsewhere and itself states no duty to create, keep or produce a log or record, and it names no territorial reach.
- Kind
- None
- As of
What this law does
Article 274 criminalizes violating the rules for operating protected computer-information storage, processing, or transmission facilities, telecommunications networks and terminal equipment, or the rules for accessing telecommunications networks, where the violation causes destruction, blocking, modification, or copying of information and significant damage, with a second tier for grave consequences.
When LexLint raises it
When your app profile says your app crawls the web.
Back to the example · Lint your app
Page updated .