9) information including a description of security systems, security organisations or security measures; 10) information on technological solutions if disclosure of such information would damage the interests of the holder of information or if classification of such information as internal is prescribed in a contract entered into with a person in private law; 11) information which contains sensitive personal data; 12) information which contains personal data if enabling access to such information significantly breaches the inviolability of private life of the data subject; 13) information which contains data revealing details of family life; 14) information concerning application for social assistance or social services; 15) information revealing mental or physical suffering endured by a person; 16) data collected on a person during the process of taxation, except data concerning tax arrears; 17) information whose disclosure may violate a business secret; 18) reports of an internal audit before approval thereof by the head of the agency; 181) the risk assessment of vitally important services and information concerning the operational continuity plan; [RT I 2009, 39, 262 - entry into force 24.07.2009] 19) any other information provided by law. [RT I 2007, 68, 420 - entry into force 01.01.2008] (11) [Repealed - RT I, 19.12.2012, 2 - entry into force 29.12.2012] (2) The head of a state or local government agency or a legal person in public law may classify the following as information intended for internal use: 1) draft legislation of general application before it is sent for approval or submitted for passage; 2) draft documents and accompanying documents before receipt or signature thereof; [RT I 2007, 12, 66 - entry into force 01.01.2008] 3) in justified cases, documents addressed to persons within the agency which are not registered in the document register (opinions, notices, memoranda, certificates, advice, etc.); 4) information which may damage the interests of the state acting as a participant in the proceedings in a civil proceeding, until the court decision is made. [RT I 2007, 12, 66 - entry into force 01.01.2008] § 36. Prohibition on classification of information as internal (1) A holder of information who is a state or local government agency or a legal person in public law shall not classify the following as information intended for internal use: 1) results of public opinion polls; 2) generalised statistical surveys; 3) economic and social forecasts; 4) notices concerning the state of the environment; 5) reports on the work or the work-related success of the holder of information and information on the quality of the performance of duties and on managerial errors; 6) information which damages the reputation of a state or local government official, a legal person in private law performing public duties or a natural person, except sensitive personal data or personal data whose disclosure would breach the inviolability of the private life of the data subject; [RT I 2007, 12, 66 - entry into force 01.01.2008] 7) information on the quality of goods and services arising from protection of the interests of consumers; 8) results of research or analyses conducted by the state or local governments or ordered thereby, unless disclosure of such information would endanger national defence or national security; 9) documents concerning the use of budgetary funds of the state, local governments or legal persons in public law and remuneration and compensation paid from the budget; 10) information concerning the proprietary obligations of the holder of information; 11) information on the property of the holder of information; 12) precepts which have entered into force and legislation which is issued by way of state supervision or supervisory control or under disciplinary procedure and information relating to punishments in force.