Federal Law No. 152-FZ, Articles 14-17, Data Subject Rights

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 27 July 2006.

A data subject rights rule binding public and private bodies.

As of 2 September 2026.

What it requires

Honor a Russian data subject's request for confirmation of processing, correction, deletion, or consent withdrawal, and let them object to a decision based solely on automated processing that produces legal or similarly significant effects, under Federal Law No. 152-FZ Articles 14 to 17.
Expect a Russian data subject to be able to sue you directly in court for losses and for compensation of moral harm arising from unlawful processing, under Federal Law No. 152-FZ Article 17, in addition to complaining to Roskomnadzor.

If you get it wrong

Criminal exposureNo

Private right of actionYes

Penalty structure

Code of Administrative Offenses (KoAP RF) Article 13.11, part 5, fines a legal-entity operator RUB 50,000 to 90,000 for failing, within the statutory timeframe, to fulfill a data subject's request to correct, block, or destroy their data; individual entrepreneurs face RUB 20,000 to 40,000, officials RUB 8,000 to 20,000, and citizens RUB 2,000 to 4,000 for the same failure. A related but slightly lower band under part 4 (legal entities RUB 40,000 to 80,000) covers failing to provide a data subject with information about the processing of their data, the Article 14 confirmation-of-processing right. A repeat offense under part 5 is punished more severely under part 5.1 (citizens RUB 20,000 to 30,000, officials RUB 30,000 to 50,000, individual entrepreneurs RUB 50,000 to 100,000, legal entities higher still). Roskomnadzor investigates and refers these cases; the fine itself is imposed by a court (an arbitrazh court for a legal-entity respondent) following an administrative-offense protocol, not by Roskomnadzor directly.

Rule: Fixed only
As of: 2 September 2026
Minimum: 50,000
Currency: RUB
Fixed cap: 90,000

Who enforces it

Enforcement body

Roskomnadzor (Federal Service for Supervision of Communications, Information Technology and Mass Media), which investigates and refers KoAP RF Article 13.11 administrative-offense cases for a court to fine; a data subject may also sue directly in civil court under Federal Law No. 152-FZ Article 17(2).

What it reaches

Obligation class

Data subject rights

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Articles 14 to 17 give a data subject in Russia the right to confirmation of processing and the categories, legal basis, and retention period involved; correction of inaccurate data; deletion where data was collected unlawfully, its purpose is fulfilled, or consent is withdrawn; withdrawal of consent at any time; and objection to a decision producing legal or similarly significant effects based solely on automated processing.

Article 17 gives the subject the right to complain to Roskomnadzor or to sue in court for damages and compensation of moral harm. Rights run against the operator.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach
high_risk_decisions

Read the law

Consultant.ru
codified text of Federal Law No. 152-FZ, Art. 14-17, corroborated directly against Art. 17 via a second independent source, zakonrf.info

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app