The Ministry of Digital Development proposed to identify hosting clients using bank data

The Ministry of Digital Development has expanded the number of ways to identify clients of hosting providers (provide services for virtual hosting of data and websites), should from the updated draft resolution regulating the verification procedure. To the published new version of the document paid attention “Kommersant”.

Now the department proposes to consolidate the ability to identify clients using the Fast Payment System (FPS) and bank cards. In this case, the company will have to save data on the date and place of payment, amount and payment identifier (UIN). Another option is identification by phone number.

In the initial version of the document, the department listed five options for verifying the identity of hosting clients: through Gosuslugi, EBS, using an enhanced qualified electronic signature, by transfer from a bank account in Russia or other EAEU countries, and through personal submission of documents.

The Ministry of Digital Development explained to the newspaper that when expanding the list, they took into account the opinion of the industry and interested departments. They noted that providers already use the listed methods when concluding offer agreements. In this regard, they will not incur additional costs, while the security of the infrastructure will increase, the department added.

Hosters are planning to be required to verify the identity of clients from December 1, 2023, follows from the draft resolution.

At the end of July 2023, the State Duma adopted changes to the laws “On Information, Information Technologies and Information Protection” and “On Communications,” Vedomosti wrote. The adopted document implies the creation of a new register of hosting providers, registration in which will be mandatory for them, and the provision of access to the FSB and the RKN for conducting operational-search activities.

In addition, providers were required to identify clients in the manner established by the government, use the National Domain Name System (NDS) and install technical threat countermeasures (TCTC) of the RKN.