Article 86. General requirements to processing personal information of an employee and warranties of protection of this information

To guarantee human rights and freedoms of a citizen, employer and his representatives must follow the general requirements listed below during processing of personal information of an employee:

processing of personal information of an employee can be performed only to assure compliance to laws and other legislative standard acts, aiding employees in employment, education and promotion, assuring personal safety of employees, control of quality and quantity of performed work and guaranteeing safety of organization's property;

an employer must follow regulations of the Constitution of the Russian Federation, this Code and other federal laws for determination of volume and content of processed personal information of an employee;

all personal information of an employee can be received only directly from employee. If personal information of an employee can be only received from a third party, then employee must be notified of it in advance and written permission of employee is required. Employer must inform employee about purpose, possible sources and means of receiving personal information and about type of necessary personal information and consequences of refusal of employee to provide a written permission on receiving of necessary personal information;

an employer has no right to receive and process personal information about political, religious and other convictions of an employee and personal information about private life of an employee. According to Article 24 of the Constitution of the Russian Federation, an employer has right to receive and process personal information about private life of an employee only with written permission of an employee and only in cases when this information is relevant to job relationship;

an employer has no right to receive and process personal information of an employee about membership of an employee in professional organizations, public organizations and about activities of an employee in trade unions, except cases specified by a federal law;

an employer has no right to base on personal information of an employee that was received electronically or as a result of automated processing in making decisions concerning this employee;

protection of personal information of an employee from improper usage, damage or loss must be guaranteed by an employer on expenses of an employer. The order of this protection is specified in federal law;

employees and their representatives must be acquainted with documents of an organization that regulate order of processing of personal information of employees and with rights and obligations of employees in this area. Confirmation of employees is required after this acquaintance;

employees must not renounce their rights on keeping and protection of their secrets;

employers, employees and their representative must together work on the development of measures for protection of personal information of employees.