Cross-border transfer of personal data may be prohibited or limited in order to protect the foundations of the constitutional system of the Russian Federation, morality, health, rights and legitimate interests of citizens, to ensure the country's defense and state security. In 2023 the Government adopted the Rules that detail the procedure for prohibiting or restricting the cross-border data transfer on a case-by-case basis. 