// personal data

Personal data compliance.

Cookies now count as personal data, fines are tied to turnover, and the regulator must be notified before you start processing. I find what is wrong on your site and fix it. Along the way I also check images for signs of unauthorised use and page text for mentions of organisations on the foreign-agent and extremist registries — different laws, the same site visit.

takes a couple of minutes, no signup
24 hours

to notify the regulator of a breach, plus 72 for the investigation

30 k ₽

minimum fine for a sole trader who never filed the notification

6 places

where a typical site breaks the rules without knowing it

0 ₽

for the first check — you pay only for the fixing

* figures follow current Russian legislation and regulator practice

// problem

Sound familiar?.

  • Analytics starts the moment someone opens the page, before they touch the banner
  • The cookie banner has one button — «Accept». There is no way to decline
  • The consent checkbox is pre-ticked and there is no link to the policy next to it
  • A privacy policy exists but was written to tick a box and never lists the actual cookies
  • The regulator was never notified because «we are not really an operator»
  • A contact form collects phone numbers and nobody documented where they go
  • The site uses photos pulled off the internet, and nobody checked the usage rights

// included

What the work includes.

Technical check

I load your site in a real browser and record which trackers fire before consent. That is what gets fined first.

Banner and forms

Whether refusal is possible, whether the banner links to the policy, and whether consent is recorded at all.

Policy review

Whether the text matches what the site actually does, and whether cookie categories and purposes are described.

Operator registry

I check the public registry and tell you whether a notification is due.

Registries and image rights

Separate from 152-FZ — three different laws, checked in the same run since I am already on the site: images for signs of unauthorised use, page text for mentions of organisations on the foreign-agent and extremist/terrorist registries, and ad creatives for the required erid marking.

Fixing

Analytics loads only after consent, the banner gets a refuse button, forms and policy are brought in line.

Re-check

After the fixes I run the check again and send a report showing everything is closed.

// process

How it goes.

  1. 01

    Free check

    You start the check from this page. The report appears on screen right away.

  2. 02

    Risk walkthrough

    I show exactly what is broken and what it leads to. Point by point, no scare tactics.

  3. 03

    Fixing

    I apply the changes. Usually one or two days, depending on the platform.

  4. 04

    Confirmation

    A second check and a report you can show to an inspector.

// pricing

Pricing.

Check

free

A technical report listing what is broken

Fixing

from 8 700 ₽

About 3 hours: banner, consent-gated analytics, forms, policy

Ongoing

from 2 900 ₽/mo

One hour a month: re-checks after changes, policy updates

Exact cost after reviewing the task. I give the estimate before starting.

// questions

Frequently asked.

Do we really need a cookie banner? The law does not mention one.
There is indeed no explicit banner requirement. But the general rules apply: you must inform the visitor, and for analytics and advertising cookies you need consent and a way to refuse. A banner is simply the most convenient way to satisfy that.
If analytics only loads after consent, I lose data.
Yes. Visits from people who ignored the banner will not be counted, usually 10 to 30 percent. It is a deliberate trade: completeness of data against the risk of a fine. The decision is yours, I will show both options.
My site is on a website builder, I cannot touch the code.
Some fixes use the platform settings, others go through embedded code. On most builders everything closes except fine control over script load order. If something cannot be done, I will say so.
Does this guarantee I will not be fined?
No, and nobody can promise that. I close the technical violations visible from outside, the ones checked first. Legal review of contracts and internal documents is a lawyer’s job.
Is that also part of the 152-FZ check?
Not formally — image copyright, the foreign-agent and extremist/terrorist registries, and ad-marking rules sit under separate laws, not 152-FZ. I check them in the same run because it is the same site visit — it would be odd to look at cookies and miss the rest. In the report these findings sit in their own section, separate from personal data.

// Contact

Let’s discuss your project.

Describe your task or project — I will respond within 24 hours. If you don’t have a detailed specification yet, I can help you define it.

Telegram @enotit Channel @by_enotit LinkedIn enotit

By clicking “Submit”, I consent to the processing of my personal data for the purpose of responding to my inquiry and confirm that I have read and agree to the Privacy Policy .