Does Russian law impose more stringent rules for specific types of PII? Under the law, all personal data is divided into general data, which includes an individual’s full name, passport details, profession and education, and in essence amounts to any personal data other than sensitive or biometric data; sensitive data, which includes data relating to an individual’s health, religious and philosophical beliefs, political opinions, intimate life, race, nationality and criminal records; and biometric personal data, which includes data such as fingerprints, iris images and, arguably, certain types of photographic images. The processing of data in the three categories must be justified by reference to a specific purpose and, in most cases, requires explicit written consent by an individual.
