In 2014, the Russian Federation enacted a new law requiring data on Russian citizens to be stored within the geographical boundaries of Russia.

Under the Russian Federal Data Localization law, in addition to just storing the data, companies are required to segregate their data in ways that comply with the specifics of the legislation. This poses challenges for companies with a large presence in Russia.YDC quantifies the risks associated with the legislation on a pre-mitigation and post-mitigation basis.