meta_id 3075401

On April 20, 2025, amendments to Russia's Code of Administrative Offences and Criminal Code entered into force, designed to enhance the security of critical information infrastructure (CII). The changes were introduced by Vyacheslav Volodin, Chairman of the State Duma of the Federal Assembly of the Russian Federation. The amendments modify Article 274.1 of the Criminal Code, which addresses unlawful interference with Russia's critical information infrastructure. Under the revised provisions, criminal liability now extends to unauthorised access to protected computer information and violations of CII operational rules, provided such actions result in destruction, blocking, modification, or copying of computer information contained within Russia's CII. The maximum penalty remains unchanged at up to six years' imprisonment. The article is supplemented with a provision allowing persons who committed offences under Part 3 to be exempted from criminal responsibility if they actively assisted in the disclosure or investigation of the crime, including taking necessary measures to preserve evidence of unlawful interference with CII, and if their actions do not constitute another criminal offence. The Code of Administrative Offences has been amended to establish liability for violations of operational rules governing CII objects. Maximum administrative fines for such violations reach 500,000 rubles for legal entities. Critical information infrastructure, as defined by Federal Law No. 187-FZ (July 27, 2017), encompasses information systems, information and telecommunications networks, and automated control systems operating in healthcare, science, transport, communications, energy, property registration, banking, financial markets, fuel and energy complexes, atomic energy, defence, aerospace, mining, metallurgical, and chemical industries. REFERENCES: State Duma Official Website (Russian Federation Parliament)