Persons guilty of violating the rules on obtaining, storing, processing and protecting the employee's personal data are liable according to the legislation in force.