Russian citizens are facing further isolation from the global internet as a sweeping ban on Virtual Private Network (VPN) services comes into force today, vpnMentor reports,

The ban also targets resources that promote the use of VPNs to circumvent government censorship. This action marks a new escalation in the nation’s ongoing campaign to regulate online activity and raises concerns about the creation of a “Digital Iron Curtain”.

Artyom Sheikin, a member of the Russian parliament’s Federation Council, said on October 3 that the country’s Roskomnadzor media watchdog plans to block virtual private networks (VPNs) across the country as of March 1, 2024. As Russian authorities have introduced dramatic restrictions to increasing numbers of independent websites to block the flow of information related to Moscow’s invasion of Ukraine, demand for VPN services significantly increased among Internet users. Sheikin emphasized that it was “especially important” to block access to Meta Platforms, which owns Instagram, WhatsApp, and Facebook.

In 2022, nearly 23% of the Russian population used VPN services compared to only 9% in 2021. The surge in VPN usage is associated with Russia’s invasion of Ukraine and the Russian authorities’ subsequent blockage of an estimated 138,000 websites, including social media platforms such as Instagram, Facebook, and X (formerly Twitter). In 2023, Russia received an index score of 21 out of 100 in the annual Freedom on the Net (FOTN) ranking by Freedom House. With the notable trend of censorship and legal restrictions online, it is clear to see why people in Russia may wish to stay anonymous while protecting their privacy — and why the government’s next move is to ban VPNs.

READ
Ransomware Attack on Change Healthcare Exposes Data of Over 100 Million Americans
Buy Me A Coffee

Timeline of Digital Restrictions in Russia

  • 2000–2001: First Restrictions
    The Russian government began creating and enforcing regulations to provide state control of the internet, including laws limiting online content and restricting user activities.
  • 2012: Internet Blacklist Law
    The Russian government created a law to allow the blacklisting of websites without a court order or any real oversight to deem the website unacceptable. At the time, Russian civil society raised concerns that the laws could restrict freedom of expression.
  • 2014: Blogger Registration Law
    Influential bloggers — or any person whose online presence or website draws more than 3,000 daily readers — have to register with the government, disclose personal information, and provide technical details to the principal security agency of Russia, which is the Federal Security Service of the Russian Federation (“FSB”). This move was seen by privacy advocates as an attempt to intimidate, monitor, and control influential individuals online.
  • 2015: Data Localization Law
    Russia required internet companies (both foreign and domestic) to store the personal
    data of Russian users on servers located within the country. This law also required the information to be accessible to authorities, effectively giving the state control over user data.
  • 2016: “Yarovaya Law” also known as “Big Brother Law”
    This law expanded the Russian government’s surveillance powers, mandating that internet service providers (ISPs) store users’ communications data for up to three years. They were also required to provide full access to security agencies, which involved installing surveillance hardware and software. Additionally, the law banned search engines from displaying results for blacklisted websites.
  • 2017: Instant Messaging Services Must Share Encryption Keys
    Under this law, all instant messaging services operating in Russia were required to provide the FSB with access to users’ encrypted messages. This rendered any privacy features of the app worthless as all communications could be decrypted using the keys provided by law. In addition, all users of messaging apps had to be identified through the registration of the mobile provider.
  • 2018: VPN and Proxy Ban
    Russia passed a law banning the use of virtual private networks (VPNs) and proxy servers — both of which allow users to access blocked content — in an attempt to tighten control over online information access. The law is supposed to take effect on March 1st, 2024, nearly six years after it was first passed. The delay could be due to the difficulty of the technical capabilities needed to fully block all VPN services.
  • 2019: “Sovereign Internet” Law
    This law gave the government the authority to centralize state control over the country’s internet infrastructure in the event of perceived threats to national security. The legislation, which was enacted that same year, also set fines for spreading “disrespectful” content about the government and state officials online, further restricting freedom of speech.
  • 2020-2021: Control Over Social Media and Fines
    Under these laws, authorities could fine social media platforms for failing to delete content deemed illegal. This mandate put pressure on platforms to comply with state censorship requisites, including requirements to establish legal entities, store user data locally, and make said data accessible to authorities.
READ
North Korean Lazarus Group Exploits Google Chrome Zero-Day with Fake DeFi Game

Media and internet services in the Russian Federation are regulated by Roskomnadzor (Federal Service for Supervision in the Sphere of Telecom, Information Technologies and Mass Communications), a branch of the Ministry of Telecom and Mass Communications. Although censorship and surveillance measures may be implemented under the guise of national security or antiterrorism, their implementation shows there is a real fear inside Russia over the freedom of information, expression, communication, and thought.

Any view that deviates from the ever-shrinking list of government-approved topics appears to be considered a threat to national security. In today’s age of information and technology, it’s hard to believe that simply accessing information, liking a social media post, or using the wrong word to describe a non-approved topic can get you arrested and sent to prison for a long time. Wanting personal privacy, access to information, and confidential communication should not inherently make a person a threat to national security.

(References: vpnMentor)