Russia Targets Epic Games, Embracer, Digital Extremes Over Data Violations

Russian regulators are expanding their enforcement campaign against foreign video game publishers, with Epic Games, Embracer Group, and Digital Extremes now facing potential fines for data localization violations. The cases are scheduled for court review in the first half of May 2026, according to legal documentation reviewed by multiple sources.

The enforcement action stems from Part 8 of Article 13.11 of the Administrative Offenses Code of the Russian Federation, which requires companies to store and process Russian citizens' personal data on servers physically located within Russia. This is not a new regulation, but Roskomnadzor has significantly intensified its pursuit of gaming companies in 2026.

Since the beginning of the year, Roskomnadzor has filed lawsuits against seven major gaming companies, all accused of violating the same data storage requirement. The regulator has already won four of these cases, with Moscow courts imposing fines on Battlestate Games, Electronic Arts, Take-Two Interactive, and NetEase. The remaining three cases involve Epic Games (Fortnite), Digital Extremes (Warframe), and Embracer Group (which holds rights to Tomb Raider and Deus Ex).

According to the law firm Semenov&Pevzner, which provided details to the newspaper Kommersant, the courts are currently imposing relatively modest penalties—2 million rubles per company. This is notably below the maximum fine of 6 million rubles that regulators could demand under the current statute. The discrepancy suggests Roskomnadzor may be testing compliance waters before escalating enforcement measures.

Independent reporting from Meduza corroborates the timeline and scope, noting that at least eight administrative complaints have been filed against foreign game studios since December 2025. The outlet also reports that complaints of this nature were previously rare, with only Blizzard and Proxima Beta (PUBG Mobile) receiving fines under the same provision since 2023.

The physical reality of compliance is straightforward but costly: companies must either build or lease server infrastructure within Russian borders, or partner with local data centers. For a game like Fortnite, which processes millions of user accounts with login credentials, payment information, and gameplay telemetry, this means redirecting data flows through Russian territory. The friction is immediate—developers face engineering overhead, increased latency for some players, and ongoing maintenance of redundant systems (a problem that has plagued users for years, frankly).

Experts consulted by Kommersant warn that the current fines may not be the end of the matter. If developers choose to ignore court verdicts—neither paying fines nor rectifying violations—Roskomnadzor retains the authority to block the games entirely within Russia. This escalation path transforms what appears to be a regulatory nuisance into an existential threat for companies with significant Russian player bases.

The broader context includes legislative proposals from State Duma deputy Yana Lantratova, who in late April suggested requiring distribution certificates for video games, modeled on the film certification system. Her proposal criticized Western games including Call of Duty and called for supporting studios aligned with "traditional values." While not yet law, this signals potential additional compliance layers beyond data localization.

For Epic Games specifically, the situation carries additional complexity. The company's ownership structure includes a 40% stake held by Tencent, a Chinese technology giant that has navigated similar regulatory environments. Whether this connection influences Roskomnadzor's approach remains unclear, though Chinese companies like NetEase have already faced penalties under the same provisions.

The pattern emerging from these cases suggests a methodical enforcement strategy. Roskomnadzor appears to be establishing precedent through smaller fines before potentially escalating to maximum penalties or service blocking. This approach allows the regulator to gauge industry response while maintaining legal leverage.

Whether these companies will comply, pay fines, or risk blocking remains the real question. For now, the court reviews in May will determine the immediate outcome, but the underlying regulatory framework shows no signs of loosening.

Artūras Malašauskas is an AI Systems Integrator with 20+ years of production-grade web engineering experience. He has designed, shipped, and scaled enterprise Python/PHP systems for logistics, SaaS, and public-sector clients. For the past year, he has focused exclusively on AI integrations: deploying open-source LLMs, building generative media pipelines (image, audio, video), and engineering multi-agent workflows for real production environments. His standard: reproducibility, security, cost-efficient inference—no vaporware. He documents and evaluates emerging AI tooling, separating verified capabilities from marketing noise. Technical editor at: muza-ai.eu, ai-verslas.lt, ai-naujinos.lt Connect on LinkedIn