Resmi İletişimden Kişisel Verilerin Açıklanmasının Hukuki Sonuçları

Giriş: İhlalın Doğası

Devlet organları veya yerel yönetim organlarına vatandaş tarafından yapılan resmi bir dilekçeden elde edilen kişisel verilerin açıklanması, kişisel verilerle ilgili yasalara ve görev ahlakına karşı ciddi bir ihlal teşkil eder. Bu tür eylemler, sadece gizlilik koruma normaları değil, aynı zamanda yetki yetkileri çerçevesinde gelen bilgilerin işlenmesi için özel düzenlemeleri de etkiler. Suçlu kişinin cezalandırılması, idari, disiplin, sivil hukuki ve belirli durumlarda ceza hukuki önlemlerin birleşik bir yaklaşımı gerektirir.

Normatif Dayanak ve Suçun Sınıflandırılması

Bu alanı düzenleyen temel normatif belgeler:

Federal Law No. 152-FZ of July 27, 2006 "On Personal Data". Article 7 ("Confidentiality of Personal Data") directly prohibits the operator and other persons from disclosing personal data without the consent of the subject.

Federal Law No. 59-FZ of May 2, 2006 "On the Procedure for Consideration of Citizens' Applications in the Russian Federation". Article 6 establishes a ban on disclosing information contained in the application, as well as information about the private life of the applicant, without their consent. Personal data indicated in the application are subject to this protection.

Civil Code of the Russian Federation (CC RF).

Criminal Code of the Russian Federation (CC RF).

Labour Code of the Russian Federation (LC RF) — if the discloser is an employee of a state body.

Sorumluluk Türleri ve Çağrılma Düzeni

1. İdari Sorumluluk
En olası ve yaygın ceza türü. İdari Suçlar Hakkında Federal Kanun (KоАП RF)un 13. Başlığı tarafından düzenlenir.

Article 13.11 of the Administrative Offenses Code RF "Violation of the Legislation on Personal Data".

Part 2: Processing personal data without the written consent of the subject in cases where this is required, results in a fine. In the context of applications, consent for processing is implied for the purpose of consideration, but not for disclosure to third parties.

Punishment: For officials — a fine of 30,000 to 50,000 rubles; for legal entities — from 150,000 to 250,000 rubles. Fines increase for repeated violations (Article 9, Part 13.11 of the Administrative Offenses Code RF).

Article 13.14 of the Administrative Offenses Code RF "Disclosing Information with Limited Access".

Although personal data themselves are not state secrets, their confidential status established by law allows the disclosure to be qualified under this article, especially if the information became known due to official or professional activities.

Punishment: A fine of 500 to 1,000 rubles for individuals, from 4,000 to 5,000 rubles for officials.

The authorized body to consider cases: Roskomnadzor (Articles 23.1, 23.48 of the Administrative Offenses Code RF). To initiate a case, it is necessary to file a complaint to the territorial department of Roskomnadzor with the provision of evidence of disclosure (screenshots, witness testimony, copies of applications).

2. Disiplinary Responsibility
If the culprit is a state or municipal employee, an employee of the operator organization.

Grounds: Violation of official duties, job description, internal regulations on the protection of personal data.

Measures: Written reprimand, reprimand, dismissal on relevant grounds (Paragraph 6, Article 81 of the LC RF — disclosure of a legally protected secret that became known due to the performance of labor duties).

Procedure: Initiated by the head of a state body based on the results of an official investigation, which may be initiated on the basis of a citizen's complaint.

3. Civil Liability
The victim citizen has the right to claim compensation for damage caused by the disclosure of his personal data (Article 24 of the Federal Law No. 152 "On Personal Data").

What can be claimed:

Compensation for moral damage (Articles 151, 1099–1101 of the CC RF). The amount is determined by the court taking into account the nature of the physical and moral suffering caused, the degree of guilt of the violator. Successful enforcement requires proving the fact of violation and the infliction of moral suffering (for example, due to the dissemination of personal information, threats, calls, etc.).

Compensation for damages (actual damage and lost profits), if their amount can be proven (for example, expenses for changing the phone number, address, legal services).

Procedure: A claim must be filed with the district court of the place of residence or location of the respondent (state body that allowed the leak).

4. Criminal Liability
It occurs in the most severe cases when the disclosure has caused significant violation of the rights and legitimate interests.

Article 137 of the Criminal Code of the Russian Federation "Violation of the Inviolability of Private Life".

Part 1: Unauthorized collection or dissemination of information about the private life of a person, constituting his personal or family secret, without his consent. Information constituting a personal secret may include details set forth in the application (about health, financial situation, family conflicts, etc.).

Part 2: The same act committed with the use of one's official position.

Punishment: Fine up to 300,000 rubles, mandatory/corrective labor, compulsory labor, arrest or deprivation of liberty for several years with the deprivation of the right to hold certain positions.

Article 140 of the Criminal Code of the Russian Federation "Refusal to Provide Information to a Citizen" (if the disclosure was accompanied by the concealment of facts creating a threat to life or health, but this is a special case).

Procedure: To initiate a criminal case, it is necessary to file a complaint to the Investigative Committee of the Russian Federation or the police with the provision of all available evidence.

Algorithm of actions for the victim
Fixation of the fact of disclosure. Gather evidence: screenshots of publications, correspondence, certified extracts, witness testimony, audio or video recordings.

Addressing the head of the state body. Submit a written complaint to the head of the body from which the leak occurred. Demand an official investigation and the imposition of disciplinary liability on the culprit.

Filing a complaint with Roskomnadzor. This is a key step for attracting administrative liability. The complaint should contain a description of the situation and the attached evidence.

Addressing law enforcement agencies. If there are signs of a criminal offense (for example, dissemination of information about private life, resulting in severe consequences) — a complaint to the Investigative Committee of the Russian Federation.

Addressing the court. For the recovery of moral damage and damages. The claim may be filed against a specific official (if it is established) as well as against the state body as the operator of personal data.

Adli Uygulama Örneği

The decision of the Moscow City Court in Case No. 33-**** (2022) upheld the decision of the district court to award compensation for moral damage in the amount of 50,000 rubles to a citizen whose personal data (name, address, the essence of the complaint about neighbors) were illegally published by an employee of the institution in a public chat of a messenger during the discussion of an official issue. The court qualified the actions as a violation of Article 7 of the Federal Law No. 152 and Article 24 of the Constitution of the Russian Federation, indicating that consent to the processing of data for the purpose of consideration is not consent to their public dissemination.

Sonuç

Resmi bir dilekçeden devlet organına kişisel verilerin açıklanması, özel yaşamın dokunulmazlığına aykırı olan ciddi bir ihlal ve yetkiye olan güveni baltalayan bir eylemdir. Koruma mekanizması ve sorumluluğa çekme düzeni çok düzeyli olup, zarar gören kişinin kanıtları toplayarak ve tüm denetleyici ve hak savunucu makamlara düzenli olarak başvurmasını gerektirir. Cezanın etkinliği, suçun doğru sınıflandırılması ve uygun hukuki koruma araçlarının seçimine doğrudan bağlıdır.

Permanent link to this publication: