The group of Russian senators has introduced to Russian state duma new draft law on digital profile. According explanation note the draft law addresses the matter of rules and common approaches necessary to governing the issues of legally significant remote identification and authentication of persons with legal consequences in matters non-relevant to providing of state services and functions. The draft law defines identification, authentication and digital profile of person.
The “identificator” is the unique designation of data on person necessary to define such person by way of technical means. The “identification or authentication” is the set of operations aiming to define identificators and/or information on person, to juxtapose the given data with identificator or to verify given data and also to verify the person. The “digital profile” is the set of data on citizens and legal persons containing in single identification and authentication system and in informational systems of state authorities and bodies executing their functions under the current Russian law.
The set of informational systems in the single identification and authentication system is “the digital profile infrastructure” providing access to digital profile. The infrastructure is to be created in order to enable data exchanging in electronic form between natural persons, organisations and state authorities and bodies. The digital infrastructure provides identification and authentication of natural and legal persons, access to digital profile and extracting data therefrom at the request of natural or legal person. The digital infrastructure also enables providing of state services and execution of functions by state authorities and bodies.
The digital profile is to be one, in other words the digital profile is to be created and maintained at the federal level for all state authorities and bodies and the creation of digital profile at the local level (in separate informational system of town or administrative subject of Russian Federation) is forbidden. In the cases provided in current Russian law in order to receive information from digital infrastructure it is not necessary to receive consent from the person who is the subject of information request. The state authorities providing and putting data to the digital profile are responsible for authenticity of data provided.
The information on certain person containing in digital profile can be provided for free or on paid basis. Who can confirm the identification or authentication of person or to verify identificator? It is credit organisations (banks etc.), cell and communication operators (mobile operators, ISP etc.), operators of state informational systems and other organisations complying with the requirements set by the Russian government.