Unofficial transfer (c) Soyuzpravoinform LLC

ORDER OF THE CENTRAL MANAGEMENT OF THE SECURITY SERVICE OF UKRAINE

of August 20, 2025 No. 322

About approval of the Procedure for processing and personal data protection in the Security Service of Ukraine

According to Articles 10, 13 Laws of Ukraine "About the Security Service of Ukraine", article 6 of the Law of Ukraine "About personal data protection"

I ORDER:

1. Approve the Procedure for processing and personal data protection in the Security Service of Ukraine which is applied.

2. To provide to the head of department of legal support of the Security Service of Ukraine submission of this order on state registration in the Ministry of Justice of Ukraine in the procedure established by the legislation.

3. This order becomes effective from the date of its official publication.

Approved by the Order of the Central management of the Security Service of Ukraine of August 20, 2025, No. 322

Procedure for processing and personal data protection in the Security Service of Ukraine

I. General provisions

1. This Procedure establishes general requirements to organizational and technical measures of processing and personal data protection which are processed in the Security Service of Ukraine (further - the SSU).

2. In this Procedure terms are used in the values given in the Laws of Ukraine "About personal data protection", "About information protection in information communications systems" and also other acts of the legislation regulating questions of personal data protection.

3. The owner of personal data which are processed according to this Procedure is the SSU.

4. Managers of personal data are divisions of the Central management, regional bodies, bodies of military counterintelligence, educational, scientific, research and other institutions, organizations, the organizations and the companies of the SSU, and also the headquarters of the Anti-terrorist center under the SSU (further - divisions, bodies, SSU organizations).

5. The general organization of work connected with processing and personal data protection during their processing in divisions, bodies, organizations of the SSU is assigned to their heads (chiefs).

6. Any data or set of information about person according to which it is identified belong to personal data or it can be specifically identified.

Primary sources of information about the physical person are: the documents issued on his name; the documents signed by it; information which person provides about itself.

7. Personal data which are processed, are information with limited access, except cases, the stipulated in Article 5 Laws of Ukraine "About personal data protection".

8. Personal data are processed in information communications systems of the SSU is automated electronically by means of technical and software and in paper form.

9. This Procedure is mandatory divisions, bodies, organizations of the SSU, and also the staff-military personnel of the SSU, workers who signed the employment contract with the SSU government employees of the SSU who have access to personal data and process personal data which owner is the SSU.

II. Purpose and bases of personal data processing

1. The purpose of personal data processing is ensuring realization in the SSU:

the relations arising in connection with passing of military, public service and work;

the relations in the field of education;

the relations in the field of health care;

the relations in the field of archiving;

other relations requiring personal data processing (ensuring combat training and daily activities, providing with material means, arms and military equipment, provision of housing, realization of other social guarantees);

other tasks determined by the legislation and connected with personal data processing.

2. Personal data are processed based on provisions of the Constitution of Ukraine and the laws of Ukraine "About personal data protection", "About information", "About information protection in information communications systems", "About the Security Service of Ukraine", "About conscription and military service", "About public service", and also other laws for the purpose of implementation of powers of the SSU.

III. Categories of subjects of personal data

1. The owner and managers of personal data perform personal data processing in the relation:

staff-military personnel of the SSU;

the workers who signed the employment contract with the SSU;

government employees of the SSU;

persons liable for call-up and reservists;

cadets of the highest military educational institutions (military educational units of higher educational institutions);

candidates for military service, public service, work for the SSU;

the persons discharged from military service, or directed for passing of military service to other military forming formed according to the laws of Ukraine;

other citizens of Ukraine, foreigners, stateless persons in the presence of the bases determined by the legislation.

2. The structure of personal data which are processed in the SSU depends on category of the subject of personal data. Determination of structure of personal data on each separately category of subjects of personal data is performed according to requirements of the legislation based on which the relevant personal data are processed.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info