Putin Orders Private Data Centers to Set Aside 10% of Capacity to Support IT Infrastructure

President Vladimir Putin has signed a decree mandating that owners of privately‑run data centres across the Russian Federation set aside ten percent of their operational capacity for state use. The order, issued on Monday, creates a legal framework for the Kremlin to draw on commercial IT infrastructure in moments of need, and it follows a spate of attacks on Russian data facilities that have raised concerns about the resilience of the nation’s digital backbone.

Scope of the decree and its immediate requirements

The decree obliges private data‑centre operators to reserve a portion of their server space, network bandwidth and physical floor area equivalent to ten percent of total capacity. This reservation is to be managed by a newly‑established government commission, which will be empowered to issue orders for the release of the reserved resources. Operators are required to comply within twenty‑four hours of a commission decision, a timeline that underscores the urgency the state attaches to rapid mobilisation of digital assets.

In addition to the domestic reserve, the decree authorises the temporary utilisation of data centres located abroad, but only after clearance from the Federal Security Service (FSB). This clause signals that the Kremlin is preparing contingency plans that extend beyond national borders, potentially tapping into overseas infrastructure should domestic capacity prove insufficient.

Why the state is seeking private capacity

The move reflects a broader strategy to integrate the private sector into the state’s emergency response architecture. By creating a legal mechanism for quick access to commercial data‑centre resources, the government can shore up critical services—such as banking, communications and public administration—without having to build a parallel state‑owned infrastructure from scratch. The decree therefore serves both as a safeguard against service disruptions and as a lever to increase state control over the digital economy.

Analysts note that the ten‑percent figure is deliberately modest, allowing the state to test the system’s efficacy without imposing an overwhelming burden on private operators. Yet the requirement also introduces a new regulatory risk for businesses, which must now factor state‑directed utilisation into their capacity planning and cost structures.

Recent attacks on Russian data centres

In the weeks preceding the decree, Ukrainian drone strikes targeted data‑centre facilities belonging to major Russian technology firms, notably Yandex and Sberbank. These attacks, reported in October, demonstrated the vulnerability of critical digital infrastructure to kinetic threats and highlighted the strategic importance of data centres in the ongoing conflict. The strikes disrupted services and raised alarms about the potential for further sabotage of Russia’s information‑technology backbone.

While the source material does not detail the extent of the damage, the fact that high‑profile commercial operators were hit indicates a shift in the conflict’s scope, moving from traditional military targets to the digital domain. This escalation likely contributed to the Kremlin’s decision to formalise a rapid‑response reserve of private capacity.

The role of the Digital Development Ministry

Under the decree, the Digital Development Ministry has been tasked with conducting a comprehensive inventory of available capacity and floor space at privately owned data centres throughout the country. This inventory will map the distribution of resources, identifying where spare capacity exists and how quickly it can be mobilised. The ministry’s involvement signals a centralised approach, with a single agency coordinating the state’s digital contingency planning.

By consolidating data on private infrastructure, the ministry can create a real‑time picture of the nation’s digital resilience. This information will be crucial for the newly formed commission when issuing orders, ensuring that the state can target the most suitable facilities for any given emergency.

The special commission and its enforcement powers

The decree establishes a special government commission, which will operate under the authority of the Digital Development Ministry. This body will be empowered to order the release of the reserved ten percent capacity, and operators must comply within a twenty‑four‑hour window. The tight deadline reflects the state’s emphasis on rapid deployment, minimizing any lag that could jeopardise critical services.

Enforcement of the commission’s orders will likely be backed by regulatory penalties, although the source material does not specify the exact sanctions. Nonetheless, the legal framework creates a clear chain of command, linking the president’s directive to operational execution at the level of individual data‑centre operators.

Implications for foreign data‑centre usage

Beyond domestic facilities, the decree permits the temporary use of data centres located abroad, subject to approval by the FSB. This clause introduces a strategic flexibility: in the event that domestic reserves are insufficient, the state can tap into international infrastructure, provided it receives security clearance. The involvement of the FSB indicates that any foreign usage will be tightly controlled, likely limited to sites deemed secure from espionage or sabotage.

Such a provision could have diplomatic ramifications, especially if foreign data‑centre providers are compelled to cooperate with Russian state orders. It may also raise concerns among international partners about the potential for the Kremlin to exert pressure on foreign tech firms operating in Russia’s market.

Broader context: state control and the media environment

The decree arrives amid a tightening of state control over independent media. The Moscow Times, the source of this report, has recently been designated an “undesirable” organisation by the Prosecutor General’s Office, criminalising its operations and exposing its staff to prosecution. Earlier, the outlet was labelled a “foreign agent,” a status that further restricts its activities. These moves are presented by the authorities as measures against entities that “discredit the decisions of the Russian leadership.”

While the decree itself concerns digital infrastructure, it fits within a broader pattern of consolidating state authority over both the physical and informational spheres. By mandating private data‑centre capacity for state use, the Kremlin not only safeguards its IT operations but also deepens its reach into the commercial sector. Coupled with heightened pressure on independent journalism, these actions illustrate a concerted effort to tighten the Kremlin’s grip on the country’s critical infrastructure and narrative control.

This article was produced with AI-assisted research and editorial support. Reporting is based on the source material cited below. Sources: The Moscow Times; themoscowtimes.com; Global1.News (06 November 2026).

By Irina Volkov, Staff Writer