The Max messenger will transfer more user data to banks and stores

The Max messenger will transfer more user data to banks and stores

The “national messenger” Max will transfer more data to banks, hotels, stores, and other organizations with which users interact through it via Digital ID. Verstka noticed these changes in the messenger’s user agreement.

In the previous agreement dated May 18, clause 6.2.2. 6 noted that when a user interacted with organizations through Max, they transmitted their status to them — for example, student, adult, or member of a large family.

The new version dated September 9, in clause 6.2.2. 6, already provides for the transfer not only of status, but also of information from “documents certifying the identity of a citizen of the Russian Federation or other documents issued by state bodies, local self-government bodies, organizations.” The specific list of such documents is not specified.

Leonid Yuldashev, Russian-language project coordinator at eQualitie, told Verstka that additional information from state systems — Gosuslugi and the Unified Identification and Authentication System (ESIA, which provides citizens and officials with access to state databases) — will now be sent to organizations through the messenger.

After that, the user will get a Digital ID profile that will already be able to transmit data to third parties, and all actions performed by the user through Digital ID are considered to have been performed personally, Yuldashev explains.

Dmitry Kuteinikov, a lawyer at RKS. Global and a researcher in AI Governance, also confirms that organizations will be able to receive data from Max users’ personal documents. According to Kuteinikov, any concentration of a large set of data within a single service increases the risks of security incidents and their consequences.

Read in full on the website. Link not opening? Read it here.

😘 Subscribe to @svobodnieslova and donate — we keep working thanks to you