152-FZ · 187-FZ · GDPR · NDA

Legal Support for Information Security & Data Compliance

We guide businesses through the regulatory landscape of information security. Regulatory audit preparation, IS policy development, NDA agreements and incident legal support — all from the same trusted IS partner.

Get a consultation

Legal support areas

152-FZ & 187-FZ Compliance

Compliance audit for personal data and CII requirements. Document package preparation, Roskomnadzor notification, threat model development.

Regulatory Audit Preparation

Support during planned and unplanned inspections by Roskomnadzor, FSTEK and FSB. Representation, preparing responses to regulatory orders.

Policy & Documentation Development

IS policy, data processing regulations, staff instructions, accounting logs. Documentation compliant with current FSTEK requirements.

Contracts & NDA

Non-disclosure agreements, data processing contracts with subcontractors (data processor agreements), SZI licensing agreements.

GDPR — International Compliance

For companies with EU partners or EU citizen data: Data Processing Agreements (DPA), DPO appointment, breach notifications within 72 hours.

Incident Legal Support

Legal protection in data breach situations: timely regulatory notifications, law enforcement interaction, liability minimisation.

Why IS legal support differs from general legal counsel

  • Specialisation in IS law — we understand both technical and legal aspects simultaneously
  • Experience with FSTEK, FSB and Roskomnadzor inspections — we know what they check
  • Documents prepared based on 2024–2025 enforcement practice
  • Unified team: lawyer + IS technical specialist on every project
  • Scalable for companies from 10 to 10,000 employees

152-FZ penalties in 2025

Fines for leaking personal data of 100,000+ individuals: up to 15 million rubles. For repeat violations: up to 3% of annual revenue. Roskomnadzor has intensified unannounced inspections following high-profile breaches.

Pricing

from 50,000 ₽

basic 152-FZ documentation package. Includes templates, IS policy and Roskomnadzor notification.

Timeline

10–14 business days

for basic 152-FZ documentation package. Urgent — from 5 days.