Does a user have to conclude a separate agreement to comply with the requirements of the Russian Federal Law No. 152-FZ on Personal Data?
Written by
Updated at December 17, 2025
Case description
You need to figure out if you have to conclude a separate agreement when placing user personal data, i.e., full name, email address, phone number, in Yandex Cloud to comply with the requirements of the Federal Law No. 152-FZ.
Solution
No additional agreement is needed. When a client, acting as an operator, places personal data on Yandex Cloud resources, the client entrusts Yandex to process this data. Yandex Cloud undertakes to respect the confidentiality of personal data and ensure the security of personal data while processing it, as well as meet all legal requirements for protecting the processed personal data.