What should companies do to avoid violating Russian legislation dealing with personal data of employees and customers?

At the IP/IT legal conference of the Delovoy Peterburg news source (‘Business St. Petersburg’), Capital Legal Services corporate practice associate Vadim Kovalev shared practical recommendations which help to build a company’s system of personal data protection.

In particular, in-houses should pay attention to the following questions:

1. Whether confidentiality agreements are signed with employees;
2. Whether data access rights of the company’s employees are delimited;
3. Whether there is a trade secret regime in respect to data that is of commercial value for the company;
4. Whether the actions of users in information and communication networks are properly documented (if data is collected through a site).