The Federal Security Service of Russia requires Russian banks to store correspondence with clients and data from banking applications for law enforcement agencies.
According to RBC, by 2027, credit organisations must install systems for operational and investigative measures (SORZ) – hardware and software complexes that allow law enforcement agencies to remotely obtain data on clients.
Organisers of information dissemination are required by law to install such systems. The FSB has recognised that banks have this status because users can exchange messages on their websites and mobile applications, the publication says.
The Sberbank Online service has been included in the register of information dissemination organisers since 2019. SORZ manufacturers told RBC journalists that they see “increased interest” for the implementation of their products. Large banks do not comment on the FSB requirements.