### Russia's SORM Surveillance System Undergoes Major Upgrade, Boosting Kremlin's Digital Control Russia is significantly enhancing its **SORM** (System for Operative Investigative Activities) digital surveillance system, making it faster, more automated, and more deeply integrated into the nation's internet infrastructure. New regulations from **Russia's Ministry of Digital Development** expand data collection capabilities and aim to create comprehensive digital profiles of citizens, raising alarm among privacy advocates. #### SORM's Evolution: A Deeper Dive into Digital Surveillance For decades, Russia has cultivated one of the world's most sophisticated digital surveillance networks. The **SORM** platform grants Russian security and intelligence agencies extensive access to telephone calls, internet traffic, and other electronic communications across domestic networks. Recent regulations, published by **Russia's Ministry of Digital Development** in late May, significantly update the technical standards governing **SORM**. "Previously, the general requirement was relatively straightforward: operators had to install SORM equipment and provide authorized agencies with access when required. The updated rules go much further by specifying how information must be searched, processed and transmitted," explained **Timofei Dubrovskikh**, a researcher at digital rights nonprofit **RKS Global**. The scope of searchable data within the system has also dramatically expanded. It now includes full names, passport information, tax identification numbers, addresses, usernames, domains, URLs, corporate records, device identifiers, and geographic coordinates. According to **Dubrovskikh**, the system's primary power lies not just in intercepting communication content, but in its ability to construct comprehensive digital profiles. These profiles link phone numbers, SIM cards, devices, IP addresses, user accounts, and locations into a single, searchable network. "The overall objective is to enable SORM to quickly establish links between individuals, devices, networks, accounts and online activity," he stated. #### The Drive for Control and Suppression of Dissent While **Russia's Ministry of Digital Development** asserts these new rules are vital for national security, privacy advocates contend they will further solidify the government's pervasive ability to monitor citizens' digital activities. **Natalia Krapiva**, senior tech counsel at digital rights group **Access Now**, suggests these new requirements are designed to reinforce the perception of constant online surveillance. Russia has previously experimented with nationwide internet disruptions during political tensions, but such outages have often proven unpopular, even among politically neutral citizens. More targeted digital surveillance, however, allows authorities to identify dissent without disrupting services, thereby encouraging self-censorship. "There's a need to exert more control over the population," **Krapiva** noted. "The authorities want to create the feeling that everything is controlled and listened to, so it's better not to express disagreement online." #### Reshaping the Telecom Market and Broader Reach The new regulations are also poised to significantly impact Russia's telecommunications market. Compliance with **SORM** mandates that providers deploy specialized hardware, storage systems, and dedicated communications infrastructure capable of collecting, processing, and transmitting data in government-specified formats. This substantial investment, potentially costing millions of rubles, disproportionately affects smaller internet providers. This could accelerate consolidation within the sector, favoring larger operators with closer ties to the state. Such a shift would reduce competition and simplify the Kremlin's monitoring and control over the industry, according to **Krapiva**. Non-compliant operators face more than just financial penalties; they risk licensing issues, increased regulatory scrutiny, network approval delays, and other administrative sanctions that could threaten their very existence, **Dubrovskikh** warned. The reach of the new **SORM** regulations extends far beyond traditional telecommunications companies. They now apply to all "information dissemination organizers" and operators of autonomous systems. This broad category, as noted by Russian independent outlet **Meduza**, could encompass hosting providers, data centers, cloud operators, major technology companies, banks, universities, and large corporations managing their own internet infrastructure. "Traditionally, SORM was primarily associated with telephone networks, mobile operators and internet service providers. However, the modern internet has become far more complex," **Dubrovskikh** explained, emphasizing that merely tapping telecom operators is no longer sufficient for contemporary surveillance objectives. Security agencies now aim to correlate a vast web of technical identifiers, including phone numbers, SIM cards, devices, IP addresses, user accounts, domains, URLs, geolocation data, and subscriber information. #### Limited Opt-Out for Citizens For ordinary Russians, there is little practical recourse to opt out of this pervasive system. Because **SORM** operates within the telecommunications infrastructure rather than on users' devices, it cannot be simply disabled through software settings. While Virtual Private Networks (VPNs) might obscure some browsing activity from internet providers, they cannot conceal the existence of the VPN connection itself. Metadata and network relationships remain visible to authorities, **Dubrovskikh** highlighted. By linking fragmented data into a single, searchable network, **SORM** is transforming into a system capable of mapping not only what people communicate online, but also how they connect, move, and interact across the internet. "The new regulations strengthen not so much traditional wiretapping as the government's ability to rapidly collect and correlate disparate digital traces," **Dubrovskikh** concluded. "In that sense, they move SORM closer to functioning as a large-scale surveillance infrastructure."