- Joined
- Jan 20, 2026
- Messages
- 345
- Reaction score
- 2,371
The Ministry has expanded the list of data available to the special services.
Telecom operators and owners of Internet infrastructure will have to prepare SORM systems for more detailed collection of data about subscribers. The Ministry has updated the requirements for technical means for operational-search measures: the list included passport information, addresses, TIN, bank details, IP addresses, domains, logins and geo-coordinates, Kommersant reported.
The Ministry of Figures has prepared new requirements for SORM software, which are installed on communication networks. The order was published on May 22 on the portal of official publication of legal acts. The document concerns the organizers of the dissemination of information and owners of autonomous systems: companies must configure the equipment so that the authorized bodies can search and receive the information necessary for operational-search measures.
The new order clarifies what information should be available for the search. The list includes data for identification of subscribers, organizations and related objects: passport data, addresses, TIN, bank details, IP addresses, domains, logins, geographical coordinates and official information about the network infrastructure. The document also describes the technical way of data exchange. GraphQL, WebSocket and HTTP should be used to interact with SORM systems.
The Ministry of Finance told Kommersant that the requirements determine the procedure for the work of bodies that carry out operational-search measures or are responsible for the security of the country. The department explained that the order fixes the requirements for equipment and software installed on communication networks, and the installation of such equipment is needed to ensure safety.
Large operators did not publicly evaluate the order. Rostelecom reported that the company's equipment generally meets modern requirements, but after a detailed study of the new task and clarifying the position of the regulator may need modernization.
Rostelecom previously said that many small operators do not comply with the requirements for SORM, and constant monitoring of several thousand companies is difficult for the regulator. In the market, the update is associated not only with security, but also with an attempt to close the technical gaps that have accumulated in recent years.
Experts interviewed by the publication believe that the previous requirements for SORM left more space for interpretations, and the new order makes the system technically more specific. The regulator describes not only the list of data, but also the way you work with them: what information should be available for search, through which interfaces the transmission should go and how the system of operators should interact with the equipment for operational-search activities. The approach is associated with the complication of the Internet, the growth of encryption, the increase in the number of services and the expansion of the circle of companies that are obliged to install control equipment.
For business, new requirements can be created by the modernization of infrastructure. Operators and owners of networks will probably have to update the software, configure integration with GraphQL, WebSocket and HTTP, and buy more powerful servers to search for accumulated data. For small companies, costs can become a serious load: the minimum software and hardware complex for SORM is estimated from about 5 million rubles.
Against the background of costs, the demand for “outsourcing” may grow, when a company with already installed and accepted complex transfers data from other operators through its own channels. Market participants emphasize that architecture should not give the owner of the complex access to other people's data, but allows small players not to deploy an expensive system yourself.
Telecom operators and owners of Internet infrastructure will have to prepare SORM systems for more detailed collection of data about subscribers. The Ministry has updated the requirements for technical means for operational-search measures: the list included passport information, addresses, TIN, bank details, IP addresses, domains, logins and geo-coordinates, Kommersant reported.
The Ministry of Figures has prepared new requirements for SORM software, which are installed on communication networks. The order was published on May 22 on the portal of official publication of legal acts. The document concerns the organizers of the dissemination of information and owners of autonomous systems: companies must configure the equipment so that the authorized bodies can search and receive the information necessary for operational-search measures.
The new order clarifies what information should be available for the search. The list includes data for identification of subscribers, organizations and related objects: passport data, addresses, TIN, bank details, IP addresses, domains, logins, geographical coordinates and official information about the network infrastructure. The document also describes the technical way of data exchange. GraphQL, WebSocket and HTTP should be used to interact with SORM systems.
The Ministry of Finance told Kommersant that the requirements determine the procedure for the work of bodies that carry out operational-search measures or are responsible for the security of the country. The department explained that the order fixes the requirements for equipment and software installed on communication networks, and the installation of such equipment is needed to ensure safety.
Large operators did not publicly evaluate the order. Rostelecom reported that the company's equipment generally meets modern requirements, but after a detailed study of the new task and clarifying the position of the regulator may need modernization.
Rostelecom previously said that many small operators do not comply with the requirements for SORM, and constant monitoring of several thousand companies is difficult for the regulator. In the market, the update is associated not only with security, but also with an attempt to close the technical gaps that have accumulated in recent years.
Experts interviewed by the publication believe that the previous requirements for SORM left more space for interpretations, and the new order makes the system technically more specific. The regulator describes not only the list of data, but also the way you work with them: what information should be available for search, through which interfaces the transmission should go and how the system of operators should interact with the equipment for operational-search activities. The approach is associated with the complication of the Internet, the growth of encryption, the increase in the number of services and the expansion of the circle of companies that are obliged to install control equipment.
For business, new requirements can be created by the modernization of infrastructure. Operators and owners of networks will probably have to update the software, configure integration with GraphQL, WebSocket and HTTP, and buy more powerful servers to search for accumulated data. For small companies, costs can become a serious load: the minimum software and hardware complex for SORM is estimated from about 5 million rubles.
Against the background of costs, the demand for “outsourcing” may grow, when a company with already installed and accepted complex transfers data from other operators through its own channels. Market participants emphasize that architecture should not give the owner of the complex access to other people's data, but allows small players not to deploy an expensive system yourself.
