Russia Adds Apple and Microsoft to Its Surveillance Registry

Roskomnadzor’s October 2 designation requires both firms to store Russian user data for three years and grant security agencies access on demand

C. da Costa Avatar
C. da Costa Avatar

By

Image: Unsplash

Key Takeaways

Key Takeaways

  • Russia legally requires Apple and Microsoft to retain user data for three years.
  • Neither Apple nor Microsoft has publicly addressed their registry designation obligations.
  • Russia’s registry follows prior listings of WhatsApp, Google, and Telegram, showing a sustained pattern.

Roskomnadzor added Apple and Microsoft to its registry of “organizers of information dissemination” on October 2, according to Bloomberg. The move echoes other government efforts to leverage technology platforms through regulatory mechanisms, including the use of a surveillance app to monitor targeted populations.

The classification carries real obligations. Companies on the registry must retain user communications, including audio and video correspondence, for three years inside Russia. That retention requirement also covers user-identifying records and transmission data.

Russian security agencies can request access to that information. Non-compliance can trigger fines and, if regulators choose to escalate, restrictions on a company’s services in Russia.

What the listing does not do, on its own, is block any Apple service or confirm that any data has been transferred. The designation creates the legal obligation; whether Apple meets it is a separate question.

The Compliance Problem Neither Company Has Answered

Fundamental questions about Apple’s technical capacity and intentions remain unresolved in the available reporting.

Neither Apple nor Microsoft has publicly addressed the registry designation, according to Bloomberg and AppleInsider.

That silence leaves a central tension unresolved. Russian law requires companies to retain and produce user data on request, a pattern that recalls how a secretly tracking users controversy demonstrated the reach of government-mandated data access. Independent technical documentation of Apple’s encryption architecture would be needed to establish precisely what data Apple could technically produce, across services such as iMessage, FaceTime, or iCloud, and under what conditions.

The available reporting does not confirm which Apple services fall within the scope of the requirement. It is also not established whether Apple maintains the data infrastructure inside Russia that compliance would require, or whether Russian authorities have issued any specific disclosure requests to date.

Those are open questions, not rhetorical ones. The answers will determine whether this registry listing carries practical consequences or remains leverage on paper.

A Pattern, Not an Isolated Move

The addition of Apple and Microsoft continues a sustained Russian campaign to assert regulatory control over foreign communications platforms.

Apple and Microsoft join other foreign platforms already on the registry. WhatsApp, Telegram, Snapchat, Google, and Google Meet were listed previously; Bloomberg reported that Google was added in January. This dynamic mirrors how Europe restricts Microsoft and other tech giants from handling sensitive government data, reflecting a broader geopolitical pattern of states asserting control over foreign platforms.

Russia blocked FaceTime in December 2025. Roskomnadzor alleged the service had been used for terrorism, recruitment, and fraud, but provided no supporting evidence for those claims, Reuters reported. Russian users encountered failed connections after the restriction took effect, and Apple did not immediately respond to requests for comment at the time.

The broader regulatory campaign has used a mix of registry designations and direct service blocks to target foreign communications platforms. Apple suspended sales in Russia in March 2022 following the invasion of Ukraine; that detail is widely reported but warrants additional primary sourcing before publication.

What Comes Next Is Still Open

The registry listing places Apple inside a legal framework Russian authorities can use to demand data or restrict services, but how Apple responds remains unknown.

The listing gives Russian authorities tools to demand data or threaten service restrictions. It does not resolve how Apple will respond.

Possible responses include challenging the designation, technically limiting what it can produce given its encryption architecture, or staying silent while Russian authorities decide whether to escalate. What happens next depends on whether formal data requests arrive and how Apple answers them.

The reporting does not resolve that outcome. Watch for official requests, regulatory fines, or any public statement from Apple or Microsoft.

Share this

At Gadget Review, our guides, reviews, and news are driven by thorough human expertise and use our Trust Rating system and the True Score. AI assists in refining our editorial process, ensuring that every article is engaging, clear and succinct. See how we write our content here →