Starting from March 1, 2021 companies are obliged to receive the consent of an individual to disclose his/her personal data or process the personal data in public domain (published on social networks etc.).
The consent shall provide what personal data and how may be used and disclosed. For example, when registering on a social network, a user shall designate what data published on the network may be used and how.
Before that, personal data publicly disclosed by an individual could be used in any way. This provision of the law entailed excessive practice. For example, one Russian company parsed personal data published on a social network, analyzed it automatically and sold users’ solvency profiles to banks. The new law shall prevent abusive practice like this.
People will also be entitled to demand to stop the processing of disclosed personal data.