On May 21, 2019, the Central Bank of the Russian Federation (CBR) published its Order “on establishment of mandatory requirements for non-credit financial organisations to ensure data protection in the implementation of activities in financial markets to counter illegal financial transactions”.