Legal Support of Information Security in the Field of Personal Data Protection

The article examines current issues related to the legal aspects of personal data protection in the context of ensuring information security amid the digitalization of society. It argues that personal data are among the most vulnerable assets in today’s information environment, and that improper processing or leaks can lead to significant violations of human rights and freedoms, undermine trust in state institutions, and create threats to national security. The paper analyzes the main legislative initiatives of Ukraine that regulate the procedures for collecting, processing, storing, and using personal data, including the provisions of the Laws of Ukraine “On Information,” “On the Protection of Information in Information and Telecommunication Systems,” “On State Secrets,” and “On Personal Data Protection.” It outlines key mechanisms for ensuring data security and highlights the role of state authorities in monitoring compliance with legal requirements. Particular attention is paid to international standards and practices, notably the EU General Data Protection Regulation (GDPR), which significantly influence the development and improvement of national legislation. A comparative analysis is conducted to identify gaps in domestic legal regulation and to determine directions for its harmonization with European norms. Special emphasis is placed on the challenge’s organizations face in complying with legislative requirements, including high financial costs, personnel shortages, the growing number of cyber threats, and a low level of legal awareness among the population. The paper also considers liability for violations of personal data processing rules, including administrative, civil, and criminal sanctions, as well as consequences for business entities such as loss of business reputation or restricted access to international markets.