Article 25. Processing of special personal data

Special personal data are data on racial or social origin, political, religious or ideological beliefs, membership in political parties and trade unions, as well as data relating to physical or mental (psychic) health, information about private life and criminal record.

The processing of special personal data is prohibited, with the exception of cases provided for in the third part of this article.

The processing of special personal data is allowed:

in order to ensure state security from external and internal threats by the authorized state body;

if the subject has agreed in writing, including in the form of an electronic document, to process his special personal data;

if special personal data is published by the subject in publicly available sources;

in order to protect the rights and legitimate interests of the subject or other persons;

in the activities of the courts and relevant law enforcement agencies in the framework of a criminal case, enforcement proceedings;

in the implementation by the prosecution authorities of measures aimed at countering the legalization of proceeds from crime and the financing of terrorism;

when carrying out activities of state statistics bodies, as well as when using other state bodies of personal data for statistical purposes with the obligatory condition of their anonymization;

when providing medical and social services or establishing a medical diagnosis, treatment, provided that such data is processed by a medical professional or other person of a health care institution who is responsible for ensuring the protection of personal data;

in the exercise of rights and obligations in the field of labor relations;

in ensuring the protection of the legitimate interests of the subject or a third party in the event of incapacity or limited legal capacity of the subject;

upon disclosure of personal data, including personal data of candidates for elected public office;

when carrying out activities by a non-governmental non-profit organization, religious organization, political party or trade union, provided that the processing concerns exclusively the personal data of members or employees of these organizations and associations, and personal data is not transferred to a third party without the consent of the subjects;

in the processing of personal data of children left without parental care, when they are placed in foster care for families of citizens (on patronage) and in the implementation of other measures to ensure guardianship and trusteeship;