On August 6, 2018 the Central Bank of Russia (CBR) published an ordinance establishing a list of of information security threats that banks need to take into account when collecting, using and transferring the biometric personal data of their clients.