President Vladimir Putin on Tuesday signed a law requiring Internet companies to store all personal data of Russian users at data centres in Russia, a move which could chill criticism on foreign social networking sites like Facebook and Twitter.
These companies, which do not have offices in Russia, have become a vital resource for opposition groups and refuse to hand over user data to governments.
The use of Russian data centres would make them and other Internet companies subject to Russian laws on government access to information.
The Kremlin said the law was aimed at “improving the management of personal data of Russian citizens on computer networks” and that companies which do not comply with the legislation would be blocked.
Lawmakers who introduced the bill had complained that data stored abroad was at risk of being hacked and stolen by criminals.
The law could also cause problems for Russian companies such as tourism websites and airlines that rely on foreign-based online booking services.
Russia’s Association of Electronic Communication (RAEC), a group that lobbies on behalf of Internet companies, warned earlier this month that “many global Internet services would be impossible” under the new law.
Internet companies have also warned that the two years before the measures come into force is not sufficient time for them to find or build data centres on which to store the data.
The Internet data law comes amid a number of measures cracking down on public dissent in Russia, including introducing jail terms of up to five years for repeated participation in unsanctioned protests and restrictions on the activities of non-governmental organisations.
It is also in line with other recent Internet restrictions, including a requirement for bloggers to register as media if they have more than 3,000 followers and a law directed against “extremist” language that could see Russians go to jail for up to five years for retweeting “offensive” information.