152-ФЗ Compliance
Ensure legal compliance with Russian data protection law:
- Store only Telegram ID and name
- Allow full account deletion on request
- Use HTTPS for all data transmission
- Show data processing policy in the app
📋 Acceptance Criteria
✅ What to consider:
- All personal data must be collected, stored, and deleted in compliance with Federal Law 152-ФЗ.
- The user must be clearly informed about data usage and have control over their data.
- Deleting an account must result in the full removal of personal data from the system.
✅ Acceptance Criteria (AC):
-
GIVEN the user registers an account
-
WHEN personal data is submitted
-
THEN it is processed and stored according to the requirements of Federal Law 152-ФЗ
-
GIVEN the user deletes their account
-
WHEN the deletion process is confirmed
-
THEN all personal data is permanently removed in compliance with 152-ФЗ
-
GIVEN personal data is collected
-
WHEN the user views the privacy policy or data agreement
-
THEN the terms are clearly stated and aligned with 152-ФЗ regulations
Edited by Arina Agafonova