In February amendments to Article 13.11 of the Code of Administrative Offenses about violations of the law on personal data. They will come into force on July 1, 2017 and will affect everyone who collects, processes and stores any personal data.
Fines were divided by types of violations and increased tenfold. For example, if a privacy policy is not posted on the site, an individual entrepreneur can be fined 10 thousand rubles, and a company - 30 thousand. And if you process personal data without the consent of the client of the online store or the subscriber to the information course, then the fine for the legal entity will be up to 75 thousand rubles. The director of the company or entrepreneur will have to pay up to 20 thousand. If there are several violations, then there will be several fines.
A source of information: Blog Tinkoff