Personal Data Protection - PRACTICE AREAS

The practice

The ongoing digital transformation has turned cyber threats into one of the most acute problems of modern society. Information protection is becoming increasingly important as personal data is being collected and processed worldwide. As a result, businesses now must adapt to this new reality and deal with related challenges as the volume of cross-border personal data flows of Russian and international companies has been substantially rising. With legislation and regulatory control quickly changing, the risks posed to businesses are increasing along with the need for highly qualified legal support when working with personal data. The on-time involvement of a qualified attorney will help your business avoid significant fines and risks of criminal prosecution.

EPAM attorneys have extensive experience working with international and national companies on personal data issues. Our lawyers are members of the Federal Supervision Agency for Information Technologies and Communications (Roskomnadzor) and actively participate in its personal data working group. Additionally, they participate in drafting and clarifying laws on data protection and have co-authored a "roadmap" on the subject, which includes a programme on how to prevent violating personal data rights.

Our team also has significant experience in handling a full scope of complex privacy and security issues. Based on the specifics of every matter, we assemble a bespoke team to meet our client’s exact needs with attorneys from different practices such as Corporate, Litigation, White Collar Crime, and Intellectual Property / TMT. The professionalism and quality of our services receive acclaim from leading legal rankings such as Chambers Europe, The Legal 500, Managing IP, World Trademark Review 1000, Best Lawyers, Legal Experts, Who's Who Legal and many others.

Reputation:

Our lawyers are renowned experts in the professional community. Elena Agaeva, Counsel and Head of Personal Data Protection Practice, has participated as a speaker in over 25 business discussions, round tables, and conferences on personal data protection since 2015. Along with Elena Kvartnikova, Counsel, they regularly provide expert commentaries, articles and comprehensive reviews on legislative changes in the field.

Services

Our services include:

advising on the application of Russian personal data laws;
conducting legal due diligence of internal documents and business processes involving personal data to ensure compliance with Russian personal data regulations;
consulting on structuring of internal and external data processes in compliance with the requirements of Russian legislation, including intra-group data transfer processes within international companies and transfers to third parties;
drafting and reviewing personal data processing agreements (instructions) and other related agreements;
advising on the application of Russian personal data laws during roll-out of HR and customer management software;
preparing company regulations and other internal documents on personal data processing, including personal data processing policies and procedures and standard personal data processing consent forms;
representing clients in their relations with government authorities on issues regarding compliance with Russian personal data laws.