Russia Approves 88 Countries for Data Transfers — China In, Ukraine Out
Russia’s communications watchdog, Roskomnadzor, has officially approved a list of 88 countries where Russian companies can transfer personal data without waiting for a lengthy review of their notification. The list, published in early 2025, marks a significant shift in data sovereignty rules, with China gaining preferential status while Ukraine was removed entirely.
Under the new regulations, transfers to China are now considered low-risk, meaning companies can send personal data there immediately after notifying Roskomnadzor, without waiting for the regulator’s approval. This simplifies cross-border data flows for businesses operating in e-commerce, cloud services, and manufacturing, where Chinese partners are common.
In contrast, the United States remains on a stricter track. Despite being on the list, transfers to the US still require a full review of the notification, including a check for compliance with Russian data protection laws. This reflects ongoing tensions over data access and surveillance concerns between Moscow and Washington.
Ukraine, previously included in earlier drafts, has been completely removed from the list. The decision aligns with broader geopolitical shifts following the 2022 conflict and subsequent sanctions. For Russian companies, this means any data transfer to Ukraine now requires a special permit from Roskomnadzor, making it nearly impossible for routine business operations.
How This Affects Your Data
If you use Russian online services — from banking to social media — your personal data may now be stored or processed in China or other approved countries. While this can improve service speed and reduce costs for companies, it also raises questions about privacy protections under Chinese law, which allows government access to data with minimal oversight.
For users concerned about data security, the key takeaway is to check the privacy policies of the services you use. Look for mentions of data localization or cross-border transfer clauses. If a service stores data in China, your information may be subject to Chinese surveillance laws, including the 2017 Cybersecurity Law and the 2021 Data Security Law.
What You Can Do
To protect your privacy, consider using encrypted communication tools and services that store data within Russia or in countries with strong privacy protections. For example, end-to-end encrypted messengers like Signal or Telegram (with secret chats enabled) keep your messages safe from prying eyes, regardless of where the company is based.
If your internet provider throttles traffic or blocks access to certain services, a reliable VPN can help. For a low-cost solution, check out @yavpn_robot — it offers multi-key access for just 5 rubles per day, with built-in bypass for white lists and traffic filtering.