PD Almanac catalogue

Catalogue of personal data processing purposes

Purposes of PD processing by process: recruitment and HR management, security, customer interaction and more

Current as of 15.11.2025
Entries: 100

Contents12 sections, 100 entries

The catalogue consists of 100 micro-purposes grouped into 12 (macro-)purposes of personal data processing (to structure consents to processing effectively and to file notifications with Roskomnadzor) and applies to most organisations. The list of purposes given is not exhaustive and must be supplemented to reflect the specifics of an individual organisation's activities and their regulation.

1. Recruitment

1.1. searching for applicants for vacant positions (employment)

1.2. effective informational (communication) and other interaction with applicants

1.3. assessing applicants' compliance with applicable requirements, including testing of knowledge and abilities, conducting surveys

1.4. vetting applicants' integrity, including managing legal, reputational and compliance risks associated with applicants (incl. preventing and (or) resolving conflicts of interest¹⁾, combating corruption and fraud), as well as obtaining information about applicants and (or) verifying the completeness, accuracy and attribution of such information

1.5. deciding whether to accept or reject an applicant for a vacant position (employment)

1.6. pre-contractual interaction with applicants (preboarding)

1.7. analysing, managing the performance of, improving (optimising) and developing the recruitment process, including assessing applicant satisfaction

1.8. forming and maintaining a talent pool as part of talent management

Personnel management2.1. formalising hiring
2. induction and adaptation to work and the social environment (onboarding)
3. performing the job function and fulfilling job (official) duties
4. keeping HR and military registration records
5. taking management and HR decisions, ensuring career development and promotion
6. granting leave and additional days of rest (time off in lieu)
7. organising remote working
8. managing talent and the workforce, succession planning
9. planning staff work and managing labour productivity, monitoring and controlling the quantity and quality of work performed and the efficient use of working time, checking and assessing the performance of job duties
10. considering and resolving labour disputes, conflict situations and other disagreements in the context of employment relations
11. providing incentives2) for conscientious and efficient work, and recognising professional achievements, personal merits, talents and abilities
12. monitoring compliance with labour discipline rules and with careful treatment of the property of the employer and other persons
13. preparing and issuing a reference (service record) on work performance, including an assessment of business qualities
14. carrying out dismissal and conducting an exit interview (survey)
15. organising and conducting internships and (or) work placements (introductory, production or pre-graduation)
16. ensuring HR document flow (in paper and electronic form), keeping official correspondence (in paper and electronic form), and issuing and using electronic signatures
Previous section1 RecruitmentContentsNext section3 Personnel remuneration

3. Personnel remuneration

3.1. calculating and paying salary, supplements, bonuses, benefits³⁾, reimbursement of expenses incurred, compensation⁴⁾, financial assistance, remuneration⁵⁾ for official results of intellectual activity and making other payments, and granting tax deductions

3.2. calculating and making deductions from salary and other income in cases provided by law

3.3. keeping accounting and tax records on staff

3.4. arranging the issue of bank cards for personal and (or) business use

3.5. organising and implementing long-term incentive programmes that provide financial assets in various forms

Ensuring staff productivity, development and safety4.1. effective informational (communication) and other interaction with staff
2. planning, organising and holding work (official) events of various kinds
3. organising and (or) conducting training6) of various kinds (including briefings), advanced training, professional (re)training, testing of knowledge and abilities, conducting work-related and other interviews (surveys)
4. planning and monitoring needs for career development and for professional and personal knowledge and skills
5. taking appropriate measures and actions (incl. monitoring compliance with rules, training, briefings, internships, knowledge testing) on occupational safety, safety engineering, fire safety, civil defence, protection against emergencies, industrial, radiation, biological and food safety, environmental protection and the sanitary and epidemiological welfare of the population
6. conducting the special assessment of working conditions (SAWC) and occupational risk assessment (ORA)
7. providing work uniforms and personal protective equipment, sanitary and household services, medical care, milk or other equivalent foodstuffs, therapeutic and preventive nutrition
8. organising medical examinations, health check-ups, professional fitness examinations and medical assessments to determine whether staff can perform their job function, and to diagnose and prevent occupational diseases
9. investigating, documenting (reviewing), recording and notifying of micro-injuries, accidents and occupational diseases
10. preventing and curbing the spread of infections among staff, giving staff the necessary support in overcoming infectious diseases and their consequences
Previous section3 Personnel remunerationContentsNext section5 Staff support and motivation

Staff support and motivation5.1. participation in voluntary insurance programmes, including health insurance, life insurance, accident insurance, critical illness insurance, travel insurance for trips abroad, pension and savings insurance
2. providing various benefits (perks, privileges, guarantees), incl. those related to meals, fitness, travel to and from the place of work and on leave
3. achieving and maintaining an optimal level of motivation and engagement in work (official) activity, including organising participation in loyalty programmes of various kinds and other incentive (reward) measures
4. assessing satisfaction with one's work, current workplace and working conditions, and assessing the external perception of the employer and its practices
5. organising the celebration of events and anniversaries of various kinds, and collecting voluntary donations for the funeral of a deceased colleague and for financial assistance
6. organising voluntary participation in internal events unrelated to work (official) activity, and in public and charity events
7. maintaining internal wellbeing and satisfaction with quality of life, and helping to lead a healthy lifestyle7)
8. supporting, encouraging and developing the internal (official/corporate) system of values and culture, incl. diversity, inclusion and equity8)
9. assistance in obtaining a consumer loan
10. providing sanatorium and resort treatment and company housing
11. maintaining a community of current and former employees
Previous section4 Ensuring staff productivity, development and safetyContentsNext section6 Ensuring spatial mobility of staff

6. Ensuring spatial mobility of staff

6.1. organising (incl. formalising) business meetings and trips, including business trips and other official travel, and managing the associated risks

6.2. assisting with entry documents and (or) work permits in the Russian Federation and (or) foreign states

6.3. providing staff and (or) related persons with favourable and safe conditions for relocation and for staying (residing, studying) in the Russian Federation and (or) foreign states

6.4. ensuring local transport mobility (individual car transport, use of micromobility vehicles⁹⁾ and public transport)

6.5. providing vehicles for use and (or) official operation, proper accounting and reimbursement of the costs of such operation, and giving effective technical assistance during official vehicle operation

6.6. monitoring and controlling the official operation and safety of vehicles, and protecting the employer's property interests during official operation of vehicles and when resolving insured/non-insured incidents involving them

6.7. assessing vehicle driving skills, including defensive driving skills, and organising relevant training to reduce accident rates during official operation of vehicles

7. Ensuring the safety of operations

7.1. warning of, preventing and recording unlawful acts (infringements), incl. protecting persons and property from such acts (infringements)

7.2. ensuring on-site and access control regimes at the real estate used, incl. obtaining information on persons present (or intending to be present) at the real estate used and (or) verifying the completeness, accuracy and attribution of such information

7.3. managing situational awareness, and optimising and maintaining the effectiveness of communications in unforeseen circumstances, including emergencies and critical (crisis) events

7.4. giving advice and assistance on personal safety, incl. during business trips

8. IT support of operations

8.1. IT organisation and maintaining the effectiveness of work (official) communications and joint activity of staff, and information support¹⁰⁾

8.2. providing software and hardware (including personal computers, office equipment, means of communication, security tools), information systems, computing and (tele)communication networks and services for use and (or) official operation, and proper accounting and reimbursement of the costs of official operation of such software and hardware, systems, networks and services

8.3. monitoring and controlling the official operation (incl. intended use) and safety of software and hardware, systems, networks and services, and giving staff effective technical support during such official operation

8.4. ensuring information security, including identification, authentication and (or) authorisation, and ensuring proper circulation and protection of information constituting secrets protected by law and intellectual property

9. Ensuring operational efficiency and sustainability

9.1. effective organisation and management of activities (incl. financial and economic), projects and assets (incl. property and intellectual property), ensuring business sustainability (continuity), keeping the necessary reporting, strategic, budget and other planning, managing reorganisation, merger, acquisition, liquidation or asset disposal transactions, coordination and interaction with affiliated and other related persons

9.2. maintaining lawfulness, transparency and ethics in conducting business, ensuring sustainable development (in the context of ecology, social responsibility and quality of governance), managing financial, commercial, legal, regulatory, operational, contractual, reputational and compliance risks (incl. identifying, preventing and resolving conflicts of interest, monitoring areas of potential conflict of interest, combating corruption and fraud)

9.3. organising effective external and internal monitoring and control (incl. through whistleblowing procedures and official checks and (or) internal investigations) of compliance with any applicable norms, and holding the persons at fault liable (including legally)

9.4. exercising rights, performing duties and observing prohibitions provided for by any applicable norms, including legislation, internal regulations, international, national, industry, professional and group standards, and codes of good practice and ethics

9.5. protecting rights and legitimate interests, incl. using all available remedies and opportunities to limit the harm caused, and delegating (formalising) authority to represent interests

9.6. participating in out-of-court and judicial dispute resolution, enforcing judicial acts, assisting the administration of justice

9.7. organising and keeping records management, ensuring document flow (in paper and electronic form), keeping legally significant correspondence (in paper and electronic form), and issuing and using electronic signatures

9.8. proper handling (incl. recording, storage and destruction) of certain categories of information and documents

10. Operational support and assistance

10.1. contract work, incl. concluding, performing, amending and terminating contracts and agreements with counterparties

10.2. making financial settlements with persons who are not staff, keeping the relevant accounting and tax records, independent audit of accounting (financial) statements

10.3. organising, carrying out and analysing, managing the performance of, improving (optimising) and developing procedures for procuring products (goods, works, services) from counterparties

10.4. taking due diligence measures in respect of prospective and current counterparties, including managing financial, commercial, legal, regulatory, operational, contractual, reputational and compliance risks associated with counterparties, and obtaining information about counterparties and their representatives and (or) verifying the completeness, accuracy and attribution of such information

10.5. assessing the practices of prospective and current counterparties in ensuring ethical conduct of business and sustainable development (in the context of ecology, social responsibility and quality of governance), and in maintaining and encouraging a culture of diversity, inclusion and equity

10.6. obtaining permission to carry out certain types of own activity and (or) obtaining confirmation that own products comply with applicable requirements

11. Improving and developing operations

11.1. searching for, identifying and analysing persons potentially interested in cooperation, establishing and maintaining business communication with interested persons, participating in procurement procedures of prospective and current counterparties, providing staff with business cards

11.2. planning, organising, conducting, managing the performance of and improving marketing (advertising, incentive, promotional), statistical and analytical activities (including surveys, research, promotions, contests, prize draws, lotteries, gambling (risk-based) games, wagers)

11.3. managing the composition, characteristics and performance of own products, and analysing the satisfaction of counterparties and other interested persons with such products, including their sale and servicing

11.4. effective informational (communication) and other interaction with all interested persons, including information support (service), sending information messages, processing and considering incoming requests and information materials of any kind, providing effective support when interested persons encounter various problems or situations, and analysing, managing the performance of, improving (optimising) and developing such interaction

11.5. carrying out, analysing, managing the performance of, improving (optimising) and developing interaction with all interested persons through information resources (websites, platforms, portals, services, systems, incl. on the Internet) and (or) mobile applications, including:

ensuring safe and productive interaction, incl. identification, authentication and (or) authorisation, countering unlawful or unauthorised actions and fraud, ensuring information security;
personalising the user experience by providing individualised/adapted services, functions, capabilities, offers and recommendations;
providing effective support when various problems or situations arise.

11.6. monitoring the behaviour of the target audience, enriching data about it, profiling¹¹⁾ (incl. various types of modelling, segmentation¹²⁾ and assessment/scoring¹³⁾), forecasting behaviour and targeting such an audience

11.7. offering and promoting own products and brand on the market through marketing¹⁴⁾ communications, incl. by sending personal offers and advertising messages and by displaying (incl. on the Internet) personalised and (or) non-personalised advertising

12. Core business

12.1. actually carrying out the main types of activity in accordance with its own constituent document

12.2. assisting counterparties in actually carrying out their various activities, incl. those provided for by intra-group agreements¹⁵⁾

12.3. if necessary, certain types of the operator's activity may additionally be specified that: (i) are directly provided for or permitted by (do not contradict) the operator's constituent documents; (ii) involve the processing of personal data; (iii) are actually carried out by the operator. For example:

developing (improving), producing, selling (providing) and servicing (supporting) own products (including software, hardware and software systems and equipment, related and consulting services)
customs clearance of cargo/goods in the course of foreign economic activity
participation in non-profit (self-regulatory) organisations, including professional and industry associations/communities
organising and ensuring mandatory registration, import, logistics and distribution of the products (incl. medicines) of the group of companies, and organising and ensuring related services (incl. laboratory services)
effective interaction with consumers of the products (incl. medicines) of the group of companies, and giving such consumers the necessary support
effective pharmacovigilance and medical device safety monitoring, and following good practices in these fields
conducting (implementing) scientific, methodological, research, educational, awareness-raising and practical events, projects and programmes, exchanging information and experience, informing patients about diseases, possible therapy and access to therapy, informing about patient support programmes
planning, organising and conducting events (including surveys and research) and other joint activities with interested persons, and analysing, managing the performance of, improving (optimising) and developing such events and activities

¹⁾ A conflict of interest means a situation in which personal interest (direct or indirect) may affect the objectivity and impartiality of the performance of official duties. An actual conflict of interest is one that really exists, including one that arose in the past and continues at present. A potential conflict of interest is a situation that may lead to a conflict of interest in the future. An apparent conflict of interest is a situation in which there are grounds to reasonably and justifiably believe that the Employee's judgements or actions may be biased, although in fact this may not be so.

²⁾ Announces a commendation, awards a bonus, presents a valuable gift or honorary certificate, nominates for the title of best in the profession.

³⁾ The social burial allowance is paid by the employer out of the funds of the Social Fund of Russia. It may be claimed not only by the spouse or a relative of the deceased employee but also by an outsider, if he or she paid for the burial.

⁴⁾ If, after an employee's death, his or her relatives approach you, you will need to pay them what the employee earned but had not yet received, and give the family assistance in connection with the death, if your internal documents provide for it. These sums must be paid to whoever applies to the organisation: either a family member, i.e. the widow (widower), parents (adoptive parents) or children (adopted children) - in one case a court also counted the parents of the widow (widower) as family members - or a dependant of the deceased who is not a family member. That is, it need not be a relative of the deceased.

⁵⁾ Under Art. 1295 and Art. 1370 of the Civil Code, employees may receive remuneration for creating works: IT specialists, designers, etc.

⁶⁾ Forms of training: lectures, seminars, trainings, courses, coaching, master classes.

⁷⁾ For example, a programme to help people quit smoking

⁸⁾ For example, posters showing disabled people.

⁹⁾ Micromobility vehicles are mopeds, e-bikes, pit bikes and personal mobility devices (e-scooters, electric skateboards, hoverboards, Segways, monowheels and other similar devices).

¹⁰⁾ If corporate directories need to be classed as publicly available PD sources and consent to PD processing obtained under Art. 8 of Law 152-FZ.

¹¹⁾ Profiling is the determination of presumed membership of a socio-demographic group, presumed income level, presumed consumer preferences, presumed household size, presumed behavioural characteristics and presumed family composition.

¹²⁾ Segmentation is the determination of presumed membership of a particular consumer group.

¹³⁾ Scoring is the determination of reliability and (or) creditworthiness and default level.

¹⁴⁾ Advertising - you need to promote goods, works or services on the market. It may be done in any way: billboards, A-frame signs, radio, banners on well-known websites, etc. PR - you want to raise the company's standing in customers' eyes and hold a special event for them. Marketing - you need to raise sales, so you devise a promotion, scripts for staff for that promotion, choose the advertising channel and work out the mechanics of all the steps.

¹⁵⁾ This refers to the operator's activity in carrying out instructions (to process personal data) from the operator's counterparties

Contents