Oh, and the guess-what-they-really-want-so-we-can-even-comply-at-all game was fun here, as well. We made a genuinely good-faith effort in no small part because the Russian market does really matter to us. I think/hope it'll hold up.
Sidenote: There's a similar (in hilarity not content) guesswork coming up with the new EU privacy regulations (GDPR and the new e-privacy regulation that isn't done yet). Sigh.
(The problem with the law is that, by the literal meaning of its wording, it is applicable to all Russian citizens anywhere in the world, not just in Russia proper.)
In other words: as conservative as possible heuristics.
Edit: Clarification. Simply having an account on some website is obviously not what I meant. I meant cases where we legitimately have and are allowed to use (see GDPR consent requirements wrt what you can and can not do with PII under EU regulations) users' PII to decide this.
What I meant is more that simply because an existing customer uses the services while travelling on Russia, we don't just move all data there.
I imagine that in Russia and similar countries, lack of guidance is by design. If you don't tow the FSB line, don't pay the bribes or if someone else wants your business, you've broken the law by not implementing federal law zxy52n.
Edit: USA places a gazillion requirements for businesses (especially banks all over the world) so what Russia is doing is nothing extraordinary, on itself. They have their own FB so I doubt they'll miss much even if FB was banned tomorrow.
i really doubt that you have ever dealt with any Russian legal/compliance/etc process, be it a personal or a business issue. As i have been there and done that, i can tell you it is night and day difference between US and Russia here.
"Nothing personal, just business" - this is how it works in US, and "Nothing business, everything is personal" - this how it works everywhere in Russia.
More or less that's what I said.
In Russia, no but am very familiar how Russia-like countries work. A phone call to the right person or cash solves you issues. Or you can bang your head against the wall
I lack enough info and context to say where this particular law lies.
Is it the reality?
But yeah, any problem can be solved in court by an non-corruptible judge. If he isn't then the appeals court is
If he was in Russia he would have been warned to pay Igor and to stop making fun of the regime. Given his attitude, he might have been somewhere in Siberia, pulling his hair out.
Or better yet, without one.
https://en.wikipedia.org/wiki/SORM
https://en.wikipedia.org/wiki/Yarovaya_law#Surveillance_prov...
1. The legal rules for operating any business are intentionally set at a very complex and onerous level.
2. Unofficial license to flout those rules is sold through bribery or otherwise supporting the corrupt actors in Russian government. These bribes are necessary for business to function, because otherwise it's impossible to operate legally.
3. When someone refuses to play bribes or otherwise bow to the will of the corrupt actors, the unofficial license to flout those rules is rescinded and the persecution of that person is entirely within the "rule of law".
I don't remember the exact specifics, but this was used pretty much exactly against a Russian oligarch who refused to sell his multi-billion dollar business below market price. He was investigated and prosecuted for some sort of crime, because everyone is always guilty of some sort of crime, because the only way to run a profitable business is to break the law and pay for the privilege of doing so.
Naturally, facebook doesn’t have much to stand on here. Russia of course has control of ingress they’ve been ratcheting up.
Best guess from me is that auditors are disagreeing with that first round good faith effort from Facebook.
My guess at the original purpose of 242 fz: This has absolutely nothing to do with the balkanization of the web, and everything to do with Russian law enforcement wanting a physical location they can easily roll into with a warrant. Nothing else really made sense to me at the time.
Source: worked at big company on 242 fz compliance when it was about to hit.
Edit: I remembered the ordering of number-letter incorrectly