Part I
Landscape and values
Where regulation is heading and which values privacy rests on
PD Almanac by Privacy Advocates
Personal data compliance and information privacy in Russia
Privacy Advocates created the Almanac to give methodological and analytical support to everyone working with information privacy and PD compliance in Russia. Read it in order as a guide, by the map as a reference or by the checklist as a compliance programme.
- 10
- parts
- 37
- sections
- 131
- subsections
- 720
- slides
Edition of 25 October 2026. The material reflects regulation as at the date of the edition and is not legal advice. This is an English translation of the Russian Almanac; in case of any discrepancy the Russian version prevails. The website matches the Almanac PDF, and every slide has a permanent ID such as TPD-006.
Almanac map
Ten parts run from the framework to industry deep dives
Each section opens as a separate page with its subsections and slides. The section address matches the QR code on its cover in the PDF.
Part II
Foundations of PD compliance
Compliance overview, staff awareness, what counts as PD and when processing is permissible
Part III
DPO and compliance organisation
Who is responsible for compliance, how it is organised and what to automate it with
Part IV
Legal bases, data subject rights and special categories
Legal bases, employees, consumers, marketing, special categories and data subject rights
Part V
Storage, localisation and transfers
How long to keep PD, how to destroy it, where to store it and to whom it may be transferred
Part VI
Digital environment and AI
Websites, user authorisation, AI and synthetic content
Part VII
Risks, protection and incidents
How to assess risk, protect PD and survive a leak
Part VIII
Supervision, liability and case law
Who inspects the operator, what the penalties are for and how courts decide
Part IX
Industry deep dives
How the general rules work for advocates, in bankruptcy and in pharmacovigilance
Part X
Secrets and information protection
Trade secrets, official information, information security, DLP and secrecy of correspondence
Entry
How the Almanac works
Three introductory slides explain the levels and navigation routes, the map of parts and the checklist navigator.
Four Almanac levels and three routes to any slide
Read in order as a guide, by map as a reference, by checklist as a compliance programme
Slide text
Four levels
10
parts
Part
I-X, from framework to secrets and info protection
37
sections
Section
01-37, former decks and new topics
133
subsections
Subsection
e.g. 20.1-20.5, deck sections
720
slides
Slide
permanent ID, e.g. TPD-006
Three routes
All 37 sections on one slide. Click a section to open its cover, a part for its divider
10 checklist sections and Almanac sections covering their controls
Navigation bar
Each slide's footer shows part, section, subsection and ID; the left icon opens the map
Disclaimer. This material reflects regulation as of the edition date and is not legal advice. Links inside the PDF work in any viewer.
Ten parts: from framework to industry deep dives
Click a section to open its cover, a part number for its divider
Slide text
Each checklist section leads to its own Almanac sections
Checklist of core PD processing and protection controls, ed. 2026.10.19: 10 sections, 132 controls
Slide text
- Checklist section
- Criticality
- Almanac sections
- 1
- Management and records
- 10 controls
- 07 Organisation
- 08 Profession
- 09 Automation
- 2
- Purposefulness and proportionality
- 9 controls
- 06 Permissibility
- 05 Definition of PD
- 12 Consumer PD
- 3
- Legal bases for processing
- 26 controls
- 10 Legal bases
- 11 Employee PD
- 14 Dissemination
- 4
- Collection, storage, destruction
- 17 controls
- 18 Destruction of PD
- 19 Localisation
- 23 Authorisation
- 22 Website
- 5
- Transfers and third-party agreements
- 15 controls
- 21 Instruction and DTA
- 20 CBT
- 14 Dissemination
- 24 AI and PD
- 6
- Data subject communication
- 18 controls
- 17 Subject rights
- 22 Website
- 14 Dissemination
- 13 Marketing
- 7
- Dealing with authorities
- 11 controls
- 29 RKN and authorities
- 20 CBT
- 19 Localisation
- 22 Website
- 8
- Staff awareness
- 4 controls
- 04 Awareness
- 07 Organisation
- 9
- Processing security
- 15 controls
- 27 Protection and PDPS
- 26 Privacy risks
- 18 Destruction of PD
- 10
- Deviations and incidents
- 7 controls
- 28 Incidents
- 07 Organisation
- Appendix 1. Liability measures
- 30 Liability
- 31 CAO case law
- 32 Landmark cases
- Appendix 2. Supervisory risk factors
- 29 RKN and authorities
- 01 Trends
Catalogues and Digest
Catalogues for the record of processing and the Digest 2026
Catalogues are easier to read as a page with a search box, so they live on the website and the Almanac slides link to them.
Digest 2026
Digest of key PD developments and initiatives
Laws, acts of the President and the Government, agency acts, drafts, case law and the policy agenda
Current as of 24.10.2026
Catalogue
PD Catalogue
Groups of personal data processed by operators, described across 15 areas of a person's life
Current as of 31.08.2026
Catalogue
Catalogue of personal data processing purposes
Purposes of PD processing by process: recruitment and HR management, security, customer interaction and more
Current as of 15.11.2025
Catalogue
Catalogue of actions with personal data
Actions (operations) with PD under Law 152-FZ, with an explanation of each action
Current as of 12.12.2025
Catalogue
Catalogue of data subject categories
Categories of data subjects in five groups, the basis of the list for most organisations
Current as of 15.11.2025
Catalogue
Catalogue of terms on personal data
Terms of PD and information privacy from Russian legal acts and national standards
Current as of 12.12.2025
Resources
Downloadable materials
Materials
Templates, checklists and calculators
DPO working tools: a draft PD regulation, RoPA, DPA and DTA templates, calculators and checklists (in Russian)
Open
Materials
Diagrams and articles
Regulatory diagrams and Privacy Advocates articles, stored on Yandex Disk (in Russian)
Open
Tool
PD processing and protection checklist
PD compliance controls in 10 sections with liability measures and risk factors
Open
Rules
Rules for using the Almanac materials
The rules are part of the Website Terms of Use; a short summary follows.
Access
Access to the Almanac materials is free of charge for all interested persons, but only to the extent that this does not harm the interests of Privacy Advocates and other persons.
Authors' rights
Exclusive rights to the results of intellectual activity in the materials remain with their authors, unless otherwise provided by law or contract.
Use
The materials, including templates, checklists and calculators, may be used in your own activities, including commercial ones.
When publishing the materials or passing them on to third parties, refer to Privacy Advocates as the source.
Selling the materials or their adapted versions as a stand-alone product is not permitted.
Good faith
The materials should be used in their current edition and in good faith, without the intention of violating the rights, freedoms and interests of data subjects or other persons.
Liability
The materials are provided for the benefit of interested persons; to the extent permitted by law, the authors and Privacy Advocates are not liable for any negative consequences of their use.