The State Duma Committee on Constitutional Legislation and State Construction approved the amendments to the law “On personal data” in the first reading. The authors are planning to oblige personal data operators to inform the authorized body on information leakages. However, is everybody content with the draft law? What are the consequences of the law for the information security market? A word to the industry experts.