Russia will keep user data for three years: what this means for control

New data storage rules in Russia

According to Главком: Starting January 1, 2026, new rules come into effect in Russia that require internet services to store user data for three years. This decision significantly increases control over citizens, as the previous data retention period was only one year. Authorities officially justify these changes by the need to combat fraud, but experts point to possible consequences for the rights and freedoms of the population.

Privacy and control issues

According to the new rules, law enforcement has the right to demand access to data archives at any time. This raises concerns about the privacy of citizens' personal information, as storing data for such a long period may become a tool for increasing state control. The Center for Countering Disinformation believes that this step is aimed at unprecedented intensification of censorship and control over citizens, as well as provoking severe self-censorship among the population.

Moreover, by the end of 2025, the Russian Federation demonstrated rates of forced confiscation of private property, and the Foreign Intelligence Service of Ukraine reported an increase in the scale of confiscations. This indicates a worsening situation in the country, which may be linked to the new data storage rules. In this context, the actions of the authorities raise concerns not only in Russia but also beyond its borders.

The new regulations in Russia regarding user data storage reflect trends toward increasing state control amid rising social and political tensions. In today's world, where information becomes increasingly valuable, these changes can have significant consequences not only for the personal freedom of citizens but also for international relations. Given the state of human rights in Russia, such initiatives further deepen the international community's concerns about the adherence to democratic standards in the country.