Decree: 10% of space in private data centers allocated to Russian authorities

President Vladimir Putin signed a measure on Monday requiring non-state data center operators to allocate 10% of their operational capacity to the authorities. The measure stems from the need to ensure a rapid response in the event of a crisis or cyberattack, allowing the government to access digital resources without having to wait through lengthy bureaucratic procedures.

The measure comes amid recent attacks on critical infrastructure: in late October, facilities operated by Yandex and Sberbank were hit by Ukrainian drones, highlighting the vulnerability of Russian data centers and their strategic importance for the continuity of online services.

Presidential Decree: Mandatory 10% capacity reserve

According to the new decree , each private data center must maintain a fixed quota of 10% free space, ready to be made available to the Ministry for Digital Development in case of emergency. The provision also requires operators to provide access to this capacity within 24 hours of an official request, with no right of refusal.

Inventory and monitoring by the Ministry

The Ministry of Digital Development is tasked with compiling a detailed inventory of all available capacity and occupied square footage in private data centers throughout Russia. This inventory will serve as the basis for the creation of a national digital capacity reserve , managed by a special commission established by the decree.

Activation procedure and role of the FSB

The government commission, established by the measure, will have the power to order the use of reserved capacity and request immediate access to the facilities. Furthermore, the decree temporarily permits the use of data centers located abroad, but only with the prior authorization of the FSB , the federal security agency, thus ensuring control over any transfer of sensitive data across borders.

Consequences for Russian cybersecurity

Recent raids on Yandex and Sberbank data centers have shown how digital infrastructure can become targets of military attacks. The 10% reserve is intended to reduce the risk of service disruptions, allowing the government to quickly reallocate resources in the event of damage or sudden operational needs. However, the requirement could also raise concerns among private operators about loss of profitability and the management of customer privacy.