Capital Legal Services has broad experience in consulting clients on compliance with the Russian laws on personal data processing and data security. The legislation in these areas is actively developing.

We represent interests of clients from various industries, including IT, pharma and biotech, retail and e-commerce, food industry, real estate, electronics and more.

Our Services

• Audit of company activities for compliance with personal data law requirements.
• Development of documentation related to personal data processing.
• Advising on issues related to localization of personal data and cross-border transfer of personal data (including intra-group transfers).
• Advising on issues of personal data processing using web sites and mobile apps.
• Support of companies during interaction with Roskomnadzor, including inspections and filing notifications on personal data processing.
• Advising on legal issues related to using cryptographic information security tools, including encryption of data on electronic media.
• Providing legal support in establishing a compliance hotline.

Experience highlights

• Consulting a multinational pharma concern on issues of personal data processing and preparation of personal data protection documents, subject to GDPR and Russian personal data requirements.
• Legal support for a globally recognized leader in manufacturing of antibodies and antigens for the diagnostics industry in bringing a full-compliance project in line with requirements of the Russian data protection law.
• Providing legal support in establishing a compliance hotline (C&E) for a global manufacturer of packaging solutions for pharma and beauty products.
• Advising a leading European manufacturer of coffee products on launching a customer care project in Russia and resolving associated data protection matters, as well as preparation of all related documentation.
• Conducting due diligence for a major Russian real estate developer in relation to its personal data processing activities, including analysis of documentation and business processes and integration of a personal data protection system consistent throughout the client’s group of companies.
• Legal support for a major Finnish real estate company in various data processing issues: developing privacy policies for the client's web site and consent forms for customers and employees, as well as advising on personal data localization requirements, including advice regarding GDPR requirements.
• Training employees of a leading developer of complex IT solutions in relation to personal data protection issues.