Russia Orders Apple and Microsoft to Hand Over User Chats on Demand

Russia's communications regulator added Apple and Microsoft to a register of digital communication providers on October 2, 2026, obliging them to keep records of users' messages, calls and video exchanges for three years inside the country. Security agencies can now demand that data, and companies that refuse face fines or outright service bans.

What the register actually requires

Being on the list is not a warning shot. It is a legal classification that turns Apple and Microsoft into data custodians for the Russian state.

According to Bloomberg, Roskomnadzor added both companies to its official register on October 2, 2026. The designation covers providers of digital communication services, and it comes with two obligations: keep records of how communications move through your systems, and hand over correspondence, voice recordings and video exchanges when security agencies ask.

The retention period is three years, and the data has to stay on Russian soil. That last detail matters more than the first. A company can technically comply while keeping everything in a European data center; Russia is explicitly saying it cannot.

Apple and Microsoft are not alone on the list. Google Meet, WhatsApp, Telegram, Snapchat, Cloudflare and Blizzard Entertainment are already there, and Google's video conferencing service was added in January. The register has been growing steadily, and the pattern is clear: the bigger the service, the more pressure it attracts.

The penalty is losing the market entirely

Fines are the opening move. The real threat is a service ban, and Russia has already shown it will use one.

Companies that ignore the requirements face financial penalties, and persistent violations could eventually result in bans on their services inside Russia. For Microsoft, that is a manageable risk; its Russian business has shrunk dramatically since 2022. For Apple, it is messier, because the company still has a large installed base of iPhones in the country even after suspending product sales and exports following the invasion of Ukraine.

The Kremlin has already restricted access to WhatsApp, Telegram, Signal and Apple's own FaceTime, so the register is not an abstract legal filing. It sits on top of an active campaign against foreign communication platforms, and the services affected are the ones people use for private conversations, voice calls and video.

The register is less about reading messages today than about forcing foreign companies to build the plumbing for it. Once three years of records sit on Russian servers, access is a request away. Apple's best defense has always been architectural — end-to-end encryption it cannot break — and that is the part worth watching, not the fines.

TechCortex take

Apple's Russian relationship is already a mess

This is the latest entry in a long file, not a standalone incident.

In April 2026, Russian customers lost the ability to buy new App Store content or renew subscriptions unless they already had funds sitting in their Apple Accounts. Two months later, the Kremlin demanded an explanation after Apple pulled several apps developed by VK, the state-controlled technology company, along with banking apps tied to sanctioned Russian financial institutions.

Then in August 2026, Russia's antitrust regulator opened proceedings against Apple for failing to preinstall the government-backed MAX messaging service and the RuStore app marketplace on its devices. The register is simply the next pressure point, and it targets the one thing Apple has always sold as a core promise: that it does not read your messages.

What Apple and Microsoft have said

Nothing, so far.

As of publication, neither company has publicly explained how it intends to address the requirements or whether it will cooperate. Neither has disclosed whether inclusion in the register will affect its existing services or commercial activity in Russia.

That silence is the story for now. Compliance would mean building retention infrastructure for a government that has already restricted rival platforms; refusal would mean risking a ban that could cut off millions of users. Both options are expensive, and neither is good.

What it means for you

If you are in the US, UK or EU, nothing changes about your iCloud or Microsoft account today. The obligations apply to communications associated with people using the companies' services in Russia, and the data must be stored inside the country.

The practical concern is for anyone traveling to or doing business in Russia with an iPhone or a Microsoft account: messages and calls made there could fall under the three-year retention rule, and there is no public indication yet of how the companies will handle that.

Russia has spent four years tightening its grip on foreign communication platforms, and the register is the most direct instrument yet. Whether Apple and Microsoft fight it, quietly comply or retreat from the market will say a lot about how much a privacy promise is worth when a government asks for the keys.

Frequently asked questions

What is Russia's surveillance register?

It is an official Roskomnadzor list of digital communication providers that must retain records of users' messages, calls and video exchanges for three years inside Russia and disclose them to security agencies on request.

When were Apple and Microsoft added?

Roskomnadzor added both companies on October 2, 2026, according to Bloomberg. They join Google Meet, WhatsApp, Telegram, Snapchat, Cloudflare and Blizzard Entertainment on the list.

Will Apple and Microsoft comply?

Neither company has said. As of publication, both have declined to explain how they will address the requirements or whether inclusion will affect their services in Russia.

Sources

  1. Apple privacy. Apple, 2026. https://www.apple.com/privacy/
  2. Apple faces growing pressure in Russia as authorities demand access to customer communications and threaten restrictions against noncompliant technology companies | TechRadar. techradar.com, 2026. https://www.techradar.com/pro/russia-demands-apple-hand-over-user-phone-and-message-records-to-its-security-agencies-when-requested

More news in Cybersecurity

Latest news