Abstract:Russian Personal Data Act is based on European Convention on the Protection of Natural Persons in the Processing of Personal Data,for the purpose of protecting the rights and freedom including the right of privacy of persons and citizens in the processing of personal data,and is applicable to all personal data processing including non-automated personal data processing. The most distinctive feature of its legislation is that the maximum length of the provisions is about obligations of personal data processing person in order to protect the realization of the personal rights of the main body. At the same time,it clearly defined that Russian citizens' personal information must be preserved in the Russian territory,and a system of personal data specialists should be established in the processing person as a legal person. In the area of national supervision,it established a non-independent administrative organ model of the main body for the protection of subjective rights of personal data,rather than following the European model of independent personal information protection agencies.