When Russia’s Yarovaya laws took effect a decade ago, they required telecom companies to store all user communications – calls, messages, photos, and metadata – and hand them to security services on demand, even without a court order. At the time, many Russians dismissed the legislation as impractical or overly ambitious. Ten years later, experts say the Kremlin has built one of the world’s most sophisticated surveillance states.
The laws, named after United Russia lawmaker Irina Yarovaya, demanded that telecom firms keep copies of all communications sent via their networks for six months and retain metadata such as time and location data for three years. Companies were required to store data inside Russia and provide authorities with tools to decrypt protected information.
When the laws were passed in 2016, small protests broke out in Moscow and St. Petersburg but failed to draw large crowds. Most Russians were not concerned, and the government pushed forward with little resistance.
Ten years on, the pattern has become a blueprint for Kremlin control. Russia’s 2019 Sovereign Internet Law followed a similar playbook, requiring companies to install deep packet inspection equipment capable of filtering content and identifying the source of online traffic. Businesses were made to foot the bill or risk losing access to the Russian market.
Today, companies that have not implemented the most advanced version of Russia’s SORM wiretapping system are barred from state-approved whitelists that continue operating during internet shutdowns. They are also denied privileges such as military service deferments for employees, creating powerful economic incentives for compliance.
The system has expanded in stages. Technology improvements made data storage cheaper, and telecom companies were allowed to phase in investments gradually. The Covid-19 pandemic brought further deferrals, and Western sanctions following Russia’s full-scale invasion of Ukraine slowed parts of the rollout. But each delay was followed by renewed pressure on businesses to comply.
Russian journalist Arseniy Vesnin, who attended an anti-Yarovaya protest in St. Petersburg a decade ago, says the law was understood at the time as another step toward dictatorship. But most people were not interested. The idea that the state would store communications data was not enough to bring large numbers onto the streets.
Today, every Russian business is legally obligated to comply with what digital rights groups describe as one of the most comprehensive traffic interception systems in the world. Online platforms are required to remove content, identify users, and block specific tools and websites at the government’s direction. Companies that wish to keep operating in Russia must carry out the state’s demands or face exclusion from the market.
Experts warn that dismissing Russia’s capacity for further repression would be a mistake. Dr. Marielle Wijermars, associate professor in internet governance at Maastricht University, notes that the legislation was initially ahead of what the state could technically enforce. Over time, infrastructure caught up with the law.
As Moscow’s war on Ukraine continues and economic pressures mount, Russian companies face growing challenges in sourcing surveillance equipment due to sanctions. But the ten-year trajectory of the Yarovaya laws shows the Kremlin has consistently turned legislative ambition into operational reality, laying the groundwork for an ever-expanding apparatus of state control.
Author: Pulse Of Nations Wire Desk
