The Federal security service (FSB) supported the issues of security deployed in the regions of monitoring systems for citizens in a period of self-isolation. The service is reminded of the need to coordinate with it such developments and eager to check them for threats, from interdepartmental correspondence. Such systems should be subject to the law “On the security of critical information infrastructure (KII)”, which distributes them to the requirements of the FSB and FSTEC, according to lawyers.The FSB supports the proposal about the need to “have security” systems monitor the behaviour of citizens during pandemic coronavirus, described in the conclusion of the Moscow branch of Association of lawyers of Russia (AYUR MO; “Kommersant” reported on April 9), it follows from the letter of the head of the scientific-technical service of FSB of Edward Chernomortsev in the Ministry of communications (there is a “b”). When designing such systems it is necessary to agree technical specifications and threat model to information security with the FSB, the letter says. The service is ready to handle such crisis information system for the presence of security threats in a week’s time, stated in the document.All information systems for monitoring citizens must comply with the requirements of the FSB and the Federal service for technical and export control (FSTEC) to protect against unauthorized access, alteration, or destruction of information, as the value and sensitivity of citizens to collect data is extremely high, pointed out earlier MO RAL in the appeal to the government, the mayor of Moscow, the communications Ministry and the FSB. Due to the high social importance of these information systems can fall under the regulation of the Federal law “On safety CUES” with all its requirements for security, which have been approved by the FSB, pointed out MO RAL, expressing doubts as to their compliance with the specified requirements. Still unknown, for example, prepared whether the mayor’s office of threat model and technical specification for development of information systems and whether these data are forwarded to the FSB, the Chairman of the Commission of AYUR in new technologies Stanislav Puginsky. In the Department of information technology (DIT) of Moscow are unable to respond promptly to the request.Objects CUES are monitoring systems that belong to state agencies, institutions or persons that carry out activities in the areas specified in the law “On safety CUES”, reminds FSTEC in its response, the Ministry of communications to request the position regarding the letter MO AYUR (there is a “b”). It is, in particular, on information systems in healthcare and transport, recalls the Director Legal at Deloitte CIS Catherine Portman. The implementation and operation of monitoring systems citizens �� period of the pandemic are connected with the maintenance of public health may exclude them from requirements to CUES, she said, agreeing that the rapid adoption of systems in pandemic could lead to a mismatch in terms of compliance with security and data protection.Roskomnadzor after considering the conclusions of MO RAL sent a request to DIT to provide information about the conditions of handling and use obtained through the application of “Social monitoring” of personal data of users to draw conclusions about the compliance of the application with the requirements of the law “On personal data”, to the letter of the Ministry. Personal data when the purposes of processing must be destroyed, recalled in Roskomnadzor. The Ministry it does not see the need for additional measures to maintain the security of information systems and data processing, the reply of the Ministry of defense of AYUR.Some regions, such as Tatarstan, have already announced that they began to remove collected information to monitoring systems data about citizens, said associate Professor, faculty of law, HSE Alexander Savelyev. In Moscow has its own situation — here a formal experimental regime for the development of artificial intelligence, he recalls, but “hopefully” that, in spite of this, Roskomnadzor will monitor compliance with the law.Yulia Stepanova
