The Russian Federal Law on Personal Data (№ 152-FZ) incorporates a specific provision for handling personal data in judicial proceedings and court records, effectively creating a limited exemption from the general data protection rules.

Text of Relevant Provisions

№ 152-FZ Art.1(3):

"The provision, distribution, transfer and receipt of information on the activity of courts in the Russian Federation that contains personal data, and the maintenance and use of information systems and information and telecommunication networks in order to create conditions for the access to this information, are conducted in accordance with Federal Law dated December 22, 2008 N 262-FZ "On the provision of access to information on the activity of courts in the Russian Federation" (part 3 introduced by Federal Law dated July 29, 2017 N 223-FZ - Collected Legislation of the Russian Federation, 2017, N 31, Art. 4772)."

Original (Russian):

"Предоставление, распространение, передача и получение информации о деятельности судов в Российской Федерации, содержащей персональные данные, ведение и использование информационных систем и информационно-телекоммуникационных сетей в целях создания условий для доступа к указанной информации осуществляются в соответствии с Федеральным законом от 22 декабря 2008 года N 262-ФЗ "Об обеспечении доступа к информации о деятельности судов в Российской Федерации".

(часть 3 введена Федеральным законом от 29.07.2017 N 223-ФЗ)"

Analysis of Provisions

The provision in Article 1(3) of the Russian Federal Law on Personal Data establishes a specific regime for handling personal data in the context of judicial proceedings and court records. This provision effectively creates a limited exemption from the general data protection rules set forth in the law.The key aspects of this provision are:

1. Scope: The provision covers "the provision, distribution, transfer and receipt of information on the activity of courts in the Russian Federation that contains personal data" (предоставление, распространение, передача и получение информации о деятельности судов в Российской Федерации, содержащей персональные данные). This broad language encompasses various forms of data processing related to court activities.
2. Separate legal framework: Instead of being governed by the general rules of the Federal Law on Personal Data, these activities "are conducted in accordance with Federal Law dated December 22, 2008 N 262-FZ" (осуществляются в соответствии с Федеральным законом от 22 декабря 2008 года N 262-ФЗ). This separate law, titled "On the provision of access to information on the activity of courts in the Russian Federation," provides specific rules for handling personal data in judicial contexts.
3. Information systems and networks: The provision also extends to "the maintenance and use of information systems and information and telecommunication networks in order to create conditions for the access to this information". This ensures that the exemption covers not just the data itself, but also the technical infrastructure used to process and provide access to court-related information.

The rationale behind this exemption is likely twofold:

1. Recognition of the unique nature of judicial proceedings: Courts often need to process personal data in ways that might not be compatible with general data protection rules, such as making judgments public or sharing information between different judicial bodies.
2. Balancing transparency and privacy: There's a public interest in having access to court information, which needs to be balanced against individual privacy rights. A separate legal framework allows for more nuanced rules that can achieve this balance.

Implications

This provision has several important implications for data controllers and processors:

1. Separate legal regime: Organizations dealing with court-related personal data must familiarize themselves with Federal Law N 262-FZ, as it takes precedence over the general data protection law in these specific circumstances.
2. Limited applicability: The exemption only applies to information related to court activities. Personal data processed by courts for administrative purposes (e.g., employee data) would still fall under the general data protection law.
3. Potential for broader data sharing: The separate legal framework may allow for more extensive sharing of personal data related to court proceedings than would be permitted under the general data protection law.
4. Compliance considerations: Organizations involved in legal proceedings or handling court records need to ensure they have systems in place to distinguish between data subject to this exemption and data that falls under the general data protection rules.
5. Transparency requirements: While this provision may allow for broader processing of personal data, it's likely that Federal Law N 262-FZ imposes its own set of requirements for transparency and data subject rights in the context of court information.