Russia adds Apple and Microsoft to its data disclosure registry
Russia reportedly put Apple and Microsoft on its data register on October 2: messages, voice and video must be stored in Russia for three years.
Russia’s communications regulator Roskomnadzor has added Apple and Microsoft to its registry of “organizers of information dissemination,” according to a Bloomberg report published October 28; the register’s own database dates both entries to October 2. Listed companies must keep Russian users’ written, voice and video messages — plus records of who sent what, and how — stored inside Russia for three years, and hand them to security services on request. Firms that refuse face fines first and, in the end, restricted access to their services. TechRadar, 9to5Mac, Quartz and MacRumors all carried Bloomberg’s reporting. Neither Apple nor Microsoft had commented at publication time.
Key points
- The date: Bloomberg broke the story on October 28, citing the register’s database, which marks both companies as added on October 2.
- The obligation: three-year in-country retention of message content — text, audio, video — plus user identity data and message-routing records, open to Russian security agencies on demand.
- The penalty path: fines first, then blocked access. Google and Google Meet joined in January; WhatsApp, Telegram, Snapchat, Cloudflare and Blizzard are already listed.
Background
Apple’s friction with Moscow has a long record. After the invasion of Ukraine in March 2022, Apple suspended product sales and exports to Russia and limited Apple Pay, but kept the App Store running — and the disputes kept coming. This April, Russian users lost the ability to buy new content or renew subscriptions without an existing Apple Account balance. In June, the Kremlin demanded an explanation after Apple pulled several apps from state-controlled VK, and removed apps from sanctioned Russian banks around the same time. In August, the antitrust regulator opened formal proceedings over Apple’s failure to preinstall the state-backed MAX messenger and the RuStore store. The messaging squeeze started earlier: WhatsApp and Telegram calls were restricted first, Signal and Viber were blocked outright, and FaceTime was cut off in December 2025 over official claims of terrorism recruitment and fraud. Per Quartz, most of these services now take a VPN to reach at all. Microsoft publishes little about its Russian operations; this round puts the two biggest consumer software companies on the same list.
The facts
Four parts of the mechanism are checkable. First, the registry is maintained by Roskomnadzor, and federal security or law-enforcement agencies can request a listing; since 2024, a court finding of repeated failure to meet notification obligations is enough to list a company without its consent. Second, the data obligation covers three layers: message content (text, audio, video), user identity information, and records of how messages were transmitted — all stored in Russia for three years. Third, the penalty path runs in two steps: fines, then restrictions on access for firms that keep ignoring the rules. Fourth, the list is not short: Quartz counts several hundred companies, with Apple and Microsoft the newest entries. The dates tell their own story: the entries are dated October 2, but the reporting surfaced on October 28 — a four-week gap between the database entry and public awareness.
| Service | Reportedly listed |
|---|---|
| WhatsApp, Telegram, Snapchat | Already on the register |
| Cloudflare, Blizzard Entertainment | On the register, date undisclosed |
| Google and Google Meet | January 2026 |
| Apple, Microsoft | October 2, 2026 (per the register’s database) |
What others say
The factual layer agrees across outlets; each adds something different. Bloomberg is the origin and cites the regulator’s database. 9to5Mac frames the story around what it means for Apple users in Russia. Quartz contributes the legal mechanism — the 2024 forced-listing clause — and the scale of the list. MacRumors dates the FaceTime block to December 2025 and gives the official justification. TechRadar assembles Apple’s full Russia timeline and notes that neither company responded. 9to5Mac also brings the prelude: in February it reported WhatsApp and Telegram being blocked as Meta was designated an extremist organization — though MacRumors’ October piece describes only call restrictions on the two apps, so the degree of blocking differs between reports. No named official or company statement has appeared, and no independent source contradicts Bloomberg — a boundary worth stating for a story this consequential.
Our take
The two new names are not the story; the data channel is. The register demands plain-text communication records, kept three years, open to security services — conversations written today stay retrievable in 2029. Teams with Russian users should re-audit their data flows: once records land in in-country storage, what gets disclosed is no longer governed by your privacy policy. Companies without Russian users should still check the register, because listing is not blocking — but Viber and Discord show the path from one to the other. The contrast with Western regulation could not be sharper: Australia’s Federal Court is forcing Apple to open iOS to rival stores, and Norway’s data authority just handed Microsoft’s Xandr a record NOK 92 million fine over Grindr data sharing. One side dismantles walled gardens and restricts data flows; this register builds a disclosure channel. Same Microsoft, same Apple, pressure from both ends. The honest caveat: every fact here traces to Bloomberg and the reports citing it. There is no public Roskomnadzor announcement yet, and no answer on whether Apple or Microsoft will comply — or how.