As someone into the business, there's only two prerequisites (concerning surveillance) to operate as an ISP in Russia. The first one is that you must (by the law) to store your ISP's netflow for 2 years, and to provide information for a) specific user (given by First + Last name) or b) by the IP address involved, to a) police, b) FSB or c) court, when they wanted to. And the second one, is that ISP required (by the law) to install surveillance equipment, sufficent enough to capture all the traffic of ISP's very own local clients (not the transit ones). That equipment is called "SORM" which means something like "support of investigation operations". That equipment is a bulk storage that is filled with data from selected customer IP when configured to. Equipment is controlled from local FSB office, using only E1 (smth like DS1) control channel. There's no bulk channel between ISP and FSB office because there's no bulk money at local government to pay to ISP for that. When they think they had gathered enough data. for specific subject, they can use this captured data from the SORM storage in the court. With the current ISP traffic plans, that storage can only held smth like 2hrs of all client's traffic captured simultaneously. Could you consider this as a "massive surveillance"?