Why You Should Revoke Consent for Personal Data Processing
Why you should revoke consent to the processing of personal data. Anyone who has contacted a bank or MFC should know this.
Federal Law No. 152-FZ "On Personal Data" of July 27, 2006, is designed to protect citizens' personal data from fraudulent activity and all forms of abuse.
What is personal data, and why does violation of 152-FZ carry penalties of up to 18 million rubles for legal entities, and for repeat violations? A citizen can face a fine of up to 50,000 rubles for violating this law, which many are unaware of.
"Personal data - any information related directly or indirectly to an identified or identifiable individual (personal data subject)."
Quote from paragraph 1 of Article 3 of the Federal Law "On Personal Data"
Most likely, anyone reading the above definition will have more questions than answers. You understand correctly that personal data can include any information about a person. It's easier to explain what isn't considered personal data.
Personal data doesn't include information that can't be used to identify a person. That's probably not entirely clear either. Let me explain with an example. You're moving around the city, and you're being filmed by CCTV cameras. Until the information is transferred to the police to establish your identity, the video recording of your walk is not considered personal data.
By the way, consent from the subject of personal data isn't always required for its processing. Exceptional cases are provided for in Part 1 of Article 6 of the aforementioned law. The list is long.
Let's say you've given consent to the processing of your personal data, for example, at a bank, a multifunctional center, or at work. Why would you want to revoke it?
The first, and perhaps most important, reason is that if you revoke consent, your personal data must be destroyed by the operator (bank, multifunctional center, etc.) within 30 days of submitting the request.
The owner of personal data has the right to demand an explanation of the purpose for which their personal data was used and by whom.
You should revoke your consent if you do not want your data stored by the operator or transferred to third parties.
You should also revoke biometric personal data, as it carries a high risk of being used for crimes or fraudulent activities.
To prevent a leak of your personal data, you should also revoke it. In 2019, Sberbank suffered a major personal data breach. Around 60 million customers were affected, including both current credit card holders and those with closed cards. And I haven't heard of Sberbank even apologizing to its customers. Meanwhile, Gref is actively promoting artificial intelligence.
Be careful, we live in a digital age. Any of us can suffer from a leak, which could result in, for example, a false accusation of a crime or theft of funds.
https://zen.yandex.ru/media/id/5c6814...