In the new version of Max’s user agreement dated September 9, clause 6.2.2.6 now states that not only the user’s status may be transferred, but also information from identity documents of a Russian citizen, or other documents issued by government authorities. This suggests that Max will begin transferring users’ passport data to banks, stores, hotels, and other organizations.
Previously, this clause referred only to the user’s status, for example, student, adult, or member of a large family. The specific list of documents in the new version is not specified.
RKS.Global lawyer Dmitry Kuteynikov said that organizations will be able to receive such information through Max from Gosuslugi and the Unified Identification and Authentication System (ESIA). According to him, access to the data will be available only to users with a Digital ID, which is issued after confirming the account in ESIA.
Kuteynikov also noted that the transfer of data is implied at the user’s request, not automatically. At the same time, the user cannot choose exactly which information to share, although it is still possible to отказаться from Digital ID for now.
In June 2025, Vladimir Putin signed a law creating a “sovereign messenger”. After that, Russian authorities began promoting Max and integrated the service with Gosuslugi, while school, student, and building chats, as well as correspondence of officials and employees of state-owned companies, were moved to it.
Kuteynikov believes that concentrating a large amount of data in one service increases the risks of security incidents and may intensify the consequences of a breach for an ordinary person. In the version of the agreement under discussion, this means an expansion of the set of information that can be transferred to organizations through Max.
Sources
