Digital Gulag: What the Russian Control System Is Made Of
“Digital GULAG” is a journalistic term usually understood as the set of state registration, surveillance, and control systems deployed in Russia in the 2010s–2020s. From a technical point of view, it is not a single product, but a set of separate components: registers (MVD, Ministry of Justice, Rosfinmonitoring, summons register), facial-recognition cameras, biometrics (EBS), traffic interception systems (SORM), filtering systems (TSPU), state services (Gosuslugi (Госуслуги), FNS, banks), and digital ID.
Each component exists and develops separately. They are linked by the growing practice of interagency data exchange: EBS is tied to Gosuslugi, the summons register is connected to the FNS and employers, banks transmit transaction data, and telecom operators transmit billing and metadata. This is not a “single database,” but it is a dense enough network to assemble a profile of a specific person from public and semi-public sources.
Below is a neutral map of the components, showing who maintains them, what data they store, and how they are connected to others. No value judgments: only the structure.
In brief
- “Digital GULAG” is an umbrella term for a set of registration and control systems, not a single product.
- The main blocks are registers, cameras, biometrics, traffic interception, filtering, and state services.
- There is no single centralized database, but interagency exchange is growing.
- Some data is public (MVD and Ministry of Justice registers), and some is closed (SORM, operational records).
- Understanding the structure helps assess risks precisely, instead of through general fear.
System components
The division is approximate, but useful for understanding: each block is responsible for its own type of data and is subordinate to its own agency.
Risk registers
The MVD wanted database, the Ministry of Justice register of foreign agents, the Rosfinmonitoring (Росфинмониторинг) list of terrorists and extremists, the Prosecutor General’s Office register of undesirable organizations, and the electronic summons register. Each is maintained by a separate agency, and the consequences of being listed differ: financial blocking, mandatory labeling of materials, or a ban on leaving the country.
Video surveillance and biometrics
City cameras with facial recognition (about 220,000 in Moscow), Face Pay in the metro, and the Bezopasny Gorod (Безопасный город) “Safe City” program in the regions. The reference-template database is the Unified Biometric System (EBS), where biometrics are uploaded through banks and MFCs.
Traffic interception and analysis
SORM-1/2/3 is equipment for remote access by security services to telephony and internet traffic. TSPU is equipment for centralized filtering and blocking under the control of Roskomnadzor. Under the “Yarovaya law,” operators store message content for up to 6 months and metadata for up to 3 years.
State services
Gosuslugi is the central point of interaction between a citizen and the state: passport, SNILS, INN, medical records, and summonses. The FNS stores data on income, property, and foreign accounts. Banks transmit transaction data upon request and as part of currency control.
Digital ID and the national messenger
Digital ID on Gosuslugi is a single digital identity for logging in to state and commercial services. The MAX messenger is positioned as a national platform with Gosuslugi integration; preinstallation became mandatory on new devices.
How the components are connected
| Data source | What goes into it | What it is connected to |
|---|---|---|
| Gosuslugi | Passport, SNILS, INN, medical records, summonses | FNS, EBS, summons register, banks |
| EBS | Biometric template (face + voice) | Gosuslugi, banks, Face Pay in the metro |
| Banks | Transactions, balances, counterparties | FNS, Central Bank, currency control |
| Telecom operators | Billing, geolocation, metadata, content (SORM) | MVD, FSB, operational records |
| Cameras | Video + recognition | MVD, operational services |
| Summons register | Military registration status, summonses | Gosuslugi, employer, MVD, FNS |
| Registers (MVD, Ministry of Justice, RFM) | Wanted status, foreign agents, extremists | Banks, border service, operational records |
How to check right now
The user cannot see the “digital profile” itself as a single object: it is distributed among agencies. But it is possible to check public slices. Wanted Radar has the MVD wanted database. minjust.gov.ru has the foreign agents register. fedsfm.ru has the list of terrorists and extremists. The Gosuslugi personal account has the summons register, biometrics, and consents for data processing. The FNS personal account has accounts, property, and tax history.
A combined picture from these sources gives a lower-bound estimate of what the state knows about the user. Closed components (SORM, operational records) cannot be checked, but their operation is activated when a legal interest arises, not by default.
Warning signs vs false alarm
A warning sign is appearing in public registers (MVD, Ministry of Justice, Rosfinmonitoring), active administrative or criminal cases, or recent summonses. In these cases, the system’s scattered components work in sync: a bank blocks an account, the border service records a crossing, and operational services receive a trigger from cameras.
A false alarm is the generalized feeling that “I live under a dome.” Components are activated in relation to a specific person on specific grounds. Most users enter the system through routine transactions (bank, state services), but do not become the object of targeted interest.
What to do next
- Check the public registers (MVD, Ministry of Justice, Rosfinmonitoring, summons register) — this is the basic audit.
- In the Gosuslugi personal account, check the consents and biometrics section: disable what you do not use.
- Consider filing a refusal of biometrics in EBS (there is a legal basis in Federal Law 572-FZ).
- Understand that refusing Face Pay in the metro does not disable street cameras; these are different systems.
- For the financial side, track bank notifications about suspicious operations, especially when working with foreign accounts.
- If specific legal risks appear (a summons, a case, inclusion in a register), contact a lawyer instead of trying to “clean up the digital trail” with technical means.
Disclaimer: this material is informational and is not legal advice. For a specific situation, contact a lawyer. Regulation of biometrics, registers, and interagency data exchange in the Russian Federation changed in 2020–2026; for current rules, check consultant.ru.
Conclusion
“Digital GULAG” is not one centralized database, but a network of components built by different agencies and connected through interagency exchange. Understanding the architecture is more important than emotion: real risks arise at the intersection of public registers and closed operational records, and work with them starts with auditing what is already visible. Technical protection tools help in specific areas; legal assistance is needed where system components begin to work actively against a specific person.