The Main Trends in the Legal Regulation of Personal Data in Russia and the European Union and Their Impact on Business

Abstract

This article discusses the main provisions of the General Data Protection Regulation (next – GDPR) and Federal Law № 152 "On Personal Data" (next – Law-152) as the main sources of legal regulation of the sphere of personal data in Russia and the European Union. A comparative legal analysis of some rules of the Regulation and Law-152 is carried out, taking into account the changes proposed in the new draft law. The high level of development of GDPR standards in matters of ensuring the security of personal data processing, the rights of personal data subjects, as well as in the interaction of participants in the data processing process with supervisory authorities is emphasized. Particular attention is paid to the mechanisms of personal data protection, the possible consequences and their impact on business within the framework of the amendments to law-152. It is concluded that the initiated amendments to the law are largely aimed at ensuring the rights and interests of personal data subjects, but at the same time may cause complication of processes for business.