On February 15, 2019, the Central Bank of the Russian Federation (CBR) published a guidance paper that is applicable to all financial institutions subject to Federal Law No. 149-Fz of July 27, 2006 “on information, information technology and protection of information”. The guidelines are aligned with Article 14.1 of the federal law and establish the authority’s expected approach to controlling risks related to the collection, processing and storage of personal data for carrying out biometric customer identification via the digital platform Unified Biometric System (UBS).