Responsibility for the absence of a privacy policy, etc.?

Question

Law in IT

Greetings. My sites use cookies and Yandex metrics, but I still haven't bothered about the privacy policy and other formalities. What can threaten me for this, who and how can I be held accountable? At least what are the most important and elementary documents I need to submit?

Answer 1

Well, if in a serious way, then the site can simply be cut out.
But this is rare.
Well, it depends on the audience. Somewhere the GDPR rules, and somewhere the Federal Law.
In general, take and write what data, how and for what purposes you use it and that's it. Judging by the question, you do not process anything special, but if it is limited to cookies and metrics, then it is very simple

Answer 2

Responsibility is only for PD operators. Whether you are recognized as an operator or not (the RKN specialists during the check), I don’t know in advance without seeing the site.
Link