The Russian Ministry of Digital Affairs has developed new requirements for telecommunications operators regarding the transfer of user data through the system of operational and investigative activities (Russian: sistiema sistiema beztywno-rozynych meroprijatij – SORM). The Kommersant daily drew attention to the document published on the legal information portal.
According to the document, operators must ensure the ability to search and provide law enforcement agencies with a wide set of user data. The list included passport data and addresses, tax identification number (INN), bank details, IP addresses, domains, logins, geolocation and organizational information.
As the director of the investigation department of T.Hunter, Igor Bederov, explained to the newspaper “Kommersant”, the previous requirements were “of a much more general nature”. According to him, the state “fills technological gaps” and makes the data collection system “not only comprehensive, but also intelligent.”
SORM is a system through which special services gain access to data of telecommunications operators and Internet service providers as part of operational and investigative activities.
Russian authorities are increasingly requesting more detailed information about users. Earlier, Roskomnadzor imposed fines on 85 telecommunications operators who did not provide the authorities with data on subscribers' IP addresses.
Roskomnadzor reported that the collection of such data is needed to “counteract computer attacks, including DDoS attacks.” However, an Izvestia source close to one of the telecommunications operators claims that information about IP addresses also allows us to determine whether a user is using a VPN.
