PERSONAL DATA PROTECTION IN MODERN LEGISLATION

Abstract

The article examines the current challenges of personal data protection caused by the rapid development of information technology and growing cyber threats The author examines the problems arising from data leaks, social engineering and the spread of phishing attacks, and analyses numerous examples of large-scale information leaks that not only cause financial losses but also undermine public trust in government agencies and commercial companies. The main focus is on the legislative aspects of personal data protection in Ukraine, its compliance with the challenges of the modern digital environment and comparison with international standards, such as the General Data Protection Regulation (GDPR) and ISO/IEC 27001 standards.

The results of the analysis show that the current legislation does not always keep pace with the rapid development of technology, which leads to the creation of ‘grey areas’ that can be used for unauthorised access to information. In addition, important factors in reducing the level of security are deficiencies in organisational management, insufficient training and lack of regular audits, as well as lack of proper coordination between government agencies. The article also offers a number of recommendations for improving the legal framework, including the introduction of stricter sanctions for violations of regulations, clear definitions of key concepts, and the introduction of special regulation for new technologies, including artificial intelligence and blockchain. The author emphasises the need to strengthen cybersecurity in organisations that process personal data, including the introduction of information security management systems and regular employee training. Raising awareness of citizens is also seen as an important factor that will contribute to a better understanding of the risks associated with the protection of personal information. The importance of state coordination and international cooperation to overcome cyber threats is also emphasised.

The study concludes that only a comprehensive approach, which includes improving legislation, strengthening cybersecurity, increasing digital literacy and developing innovative data protection technologies, can ensure an adequate level of personal data protection in the modern digital world.