Appendix No. 2 to the Decision of the Board of the Eurasian Economic Commission No. 30 of 21 April 2015 (“On Measures of Non-Tariff Regulation”) sets out the Union-wide list of goods restricted for import into the customs territory of the Eurasian Economic Union (EAEU), including Russia. The list includes, among others, (i) radio-electronic and high-frequency equipment for civilian use—devices for transmitting or receiving voice, images, or data (e.g., headings in HS 8471, 8517–8519, 8521, 8525–8528, 8531, and certain Chapter 90 items); (ii) systems and receivers for technical radio monitoring and for detecting sources of electromagnetic emissions (e.g., HS 8526–8527); and (iii) encryption (cryptographic) means, including computing machines and parts with cryptographic functions, computer devices incorporating encryption, and standalone cryptographic software (selected subheadings of HS 8471/8473 and 8523).

It is reported that foreign stakeholders have indicated that the Russian Government does not consistently publish all regulations, judicial decisions, and administrative rulings of general application relating to customs matters. In addition, foreign exporters report that the enforcement of customs regulations varies considerably across regions and ports of entry, and that regulatory changes are often frequent and unpredictable, thereby increasing costs and causing delays at the border.

While there is a safe harbour for copyright infringement under Federal Law No. 187-FZ, "On Amendments to Certain Legislative Acts of the Russian Federation on the Protection of Intellectual Property Rights in Information and Telecommunication Networks", the country lacks a safe harbour for activities beyond copyright infringement. According to Art. 13.34 of Federal Law No. 18-FZ, "On Amendments to the Code of the Russian Federation on Administrative Offences" (introduced in 2017), ISPs that fail to block banned sites as instructed by the Federal Service for Supervision of Communications, Information Technology, and Mass Media (Roskomnadzor) are liable to fines ranging from RUB 100,000 to RUB 500,000 (approx. USD 1,600 – USD 8,500). Officials of these legal entities (ISPs) face fines between RUB 5,000 and RUB 30,000 (approx. USD 85 – USD 500) for non-compliance with Roskomnadzor’s directives. If such violations are repeated within a year, penalties increase to RUB 30,000–RUB 50,000 (approx. USD 500 – USD 850) for officials and RUB 500,000–RUB 800,000 (approx. USD 8,500 – USD 13,500) for ISPs.

Law No. 97-FZ and the corresponding government decrees, Decree No. 758 and Decree No. 801, have established several requirements regarding the identification of Wi-Fi users in public places, such as parks, hotels, cafeterias, restaurants, clubs, cinemas and shopping malls, among others. The Act and the decrees require that
- ISPs must identify Internet users by means of identity documents (such as passports);
- ISPs must identify terminal equipment by determining the unique hardware identifier of the data network;
- All legal entities in Russia must provide ISPs on a monthly basis with the list of persons connecting to the Internet using their network.

Amendments introduced by Federal Law No. 241 prohibit the anonymous use of instant message (“IM”) services. Providers are obliged to identify users of the instant messaging service by the subscriber number of the mobile radiotelephone operator in the manner established by the Government of the Russian Federation, on the basis of an identification agreement concluded by the organiser of the instant messaging service with the mobile radiotelephone operator.

According to Art. 1253, intermediaries are not liable for third-party content unless they knew or ought to have known that infringing material was being used illegally on their service. It is reported that the article contains a “constructive knowledge” clause that may incentivise intermediaries to monitor their services in order to locate “illegal” material.

In December 2022, Russia signed a law requiring platforms to monitor content and remove “LGBT propaganda,” adding this term to the list of information that is illegal to distribute online. In April and October 2022, the platform TikTok was fined for refusing to remove “LGBT propaganda” and promoting “homosexual relations.”

The amendments introduced by Federal Law No. 276 prohibit internet intermediaries from providing access to websites and information resources that are designated as “resources with restricted access” by the Federal Service for Supervision of Communications, Information Technology, and Mass Media (Roskomnadzor). The Law requires Roskomnadzor to create a national information database of online resources and services to which access is prohibited in Russia. Internet service providers (ISPs) will be required to identify those owners of resources who do not block access to prohibited online resources and report them to the Roskomnadzor within three days. Operators of online search engines are required to block links to websites included in the database of prohibited online resources. If the owner of the network or information resource continues to ignore the requirement to block access to restricted websites, its Internet connection can be terminated by the ISP within 24 hours.

Art. 9 of Federal Law No. 149‑FZ stipulates that restrictions on access to information may be imposed by federal legislation and by acts of the President of the Russian Federation for the purposes of safeguarding the foundations of the constitutional order, public morality and health, the rights and lawful interests of others, and of ensuring national defence and state security.
It is reported that there have been numerous instances of the blocking of commercial web content in Russia in recent years, many of which remain in effect. These measures have included both nationwide and region-specific restrictions on major online platforms and communication services, as outlined below:
- The Russian authorities initiated platform restrictions with the centralised throttling of X on 26 February 2022, subsequently escalating to directives requiring internet service providers to fully block Facebook, X, and Instagram on 4 March 2022. All three platforms remained inaccessible in Russia as of 2025.
- Signal was blocked nationwide in Russia beginning on 9 August 2024, with the restriction continuing into 2025.
- Discord was blocked across the Russian Federation from 8 October 2024, and the block remained in effect throughout 2025.
- Viber was blocked nationally from December 2024, with the restriction persisting into 2025.
- YouTube was blocked in nearly all regions of Russia from 15 December 2024. The block remained in place in 2025.
- Telegram was confirmed to have been blocked in the Republic of Dagestan by 7 March 2025, with additional reports indicating that the application had been blocked in Chechnya and Ingushetia since October 2024.
- On 13 August 2025, Russian authorities ordered nationwide restrictions on call functionalities within WhatsApp and Telegram.
- FaceTime and Snapchat were blocked in Russia beginning on 4 December 2025.

Art. 30.6.4 of Federal Law No. 161-FZ requires that foreign-based credit card companies transmit data for all transactions within Russia through state-owned operators: the National System of Payment Cards. It is reported that this affects the possibility for financial supplies to use their processing facilities located outside of Russia.

Art. 64 of Federal Law No. 126-FZ requires telecom operators to store in the territory of the Russian Federation the following information:
- Information on the facts of reception, transmission, delivery and (or) processing of voice information, text messages, images, sounds, video or other messages of users of communication services - within three years from the moment of the end of such actions;
- Text messages of users of communication services, voice information, images, sounds, video or other messages of users of communication services - up to six months from the moment of termination of their reception, transmission, delivery and (or) processing.
In addition, Art. 10.1 of Law No. 149-FZ requires distributors of information, such as internet and telecom companies, messengers, email services, forums and other platforms that allow the exchange of information on the internet, to store in the territory of the Russian Federation the following information:
- Information on the facts of reception, transmission, delivery and/or processing of voice information, written text, images, sounds, video or other electronic messages of internet users and information about these users for one year after the end of such actions;
- Text messages of internet users, voice information, images, sounds, video and other electronic messages of internet users up to six months from the end of their reception, transmission, delivery and/or processing.

Art. 12 of Federal Law No. 152-FZ prohibits the cross-border transfer of data to countries that do not provide adequate protection of data subjects. However, cross-border transfers of personal data are permitted in the following circumstances: (i) approved by the Federal Service for Supervision of Communications, Information Technology, and Mass Media (Roskomnadzor) as providing adequate protection, which will include countries party to Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Convention 108); or (ii) in cases where such transfer is necessary to protect the life, health, or other vital interests of the data subject or other persons. Starting from 1 March 2023, operators have to notify any cross-border transfers of personal data before such transfers and, for transfers to countries which are not 'adequate', obtain permission from the Roskomnadzor for the transfer, with limited exceptions.

Russia has not joined any agreement with binding commitments to open transfers of data across borders.

Federal Law No. 152-FZ provides a comprehensive regime of data protection in the Russian Federation and follows an approach similar to that of EU Directive 95/46/EC. However, data protection in Russia is regulated by several laws in addition to the Law about Personal Data; other notable laws include the Federal Law No. 149-FZ of 27 July 2006 on Information, Information Technologies and Protection of Information.

Russian news aggregators are required to store the news disseminated, information about the news source, as well as information about the terms of its dissemination for six months and to provide access to such information to the Russian Federal Service for Supervision of Telecom, Information Technologies and Mass Media.