Russia upgrades rules for its digital spy system to better track citizens online
Russia has updated its SORM (System for Operative Investigative Activities) digital surveillance system to enhance its capabilities for tracking citizens online. The updated regulations expand the data accessible through the system, including personal information and online activity details, and aim to create comprehensive digital profiles. This move is driven by national security concerns but raises significant privacy concerns due to the potential for increased government monitoring and control over online activity.
The Russian government has significantly upgraded its SORM system, a long-standing digital surveillance platform, with new regulations published at the end of May. These updates specify how information must be searched, processed, and transmitted, expanding the scope of data accessible within the system. Previously, operators were required to provide access upon request, but now the system can access a vast array of data, including full names, passport information, tax IDs, addresses, usernames, domains, URLs, corporate records, device identifiers, and geographic coordinates. This shift aims to create detailed digital profiles linking individuals, devices, and online activity.
The Ministry of Digital Development justifies these changes as necessary for national security, while critics, such as Access Now and RKS Global, argue they will further strengthen the government's ability to monitor citizens. The regulations are intended to discourage dissent by creating a perception of constant surveillance, encouraging self-censorship. Furthermore, the requirements will impact the telecommunications market, potentially consolidating the sector around larger, state-aligned operators and posing significant financial burdens on smaller providers.
The impact extends beyond traditional telecom operators, encompassing hosting providers, data centers, cloud operators, major technology companies, banks, universities, and large corporations. The system’s expansion reflects the increasing complexity of the modern internet and the need to correlate a web of technical identifiers to effectively monitor online activity. The regulations also carry potential licensing and regulatory risks for non-compliant operators.