Personal Data as a Type of Confidential Information in the Context of Developing an Electronic State

Introduction: The development of electronic state systems in many countries worldwide determines the relevance of the article. An electronic state processes large volumes of personal data, including special categories, biometric ones. The purpose of the study is to analyze the peculiarities of personal data processing within state and municipal information systems and to develop proposals for improving legal regulation in this area while minimizing information security risks.

Materials and methods: The methodological basis of the study includes a systematic analysis of Russian and international legislation, as well as normative legal acts. The main results indicate that personal data have a dual legal nature, combining features of confidential information and professional secrecy. The study is based on materials from Russian and foreign legislation, as well as legal literature. The results of the study and their discussion: The dual nature of personal data has been identified: on the one hand, it constitutes confidential information that can be accessed with the owner’s consent, while on the other hand, it can be used without such consent, making it similar to information under secrecy regimes. It has been established that the greatest risks to information security and data processing within the framework of an electronic state arise during the creation and integration of state and municipal information systems. Legal, organizational, and technical measures to ensure information security have been analyzed, with an emphasis on the importance of their comprehensive application to mitigate threats.

Conclusions: It has been noted that the development of a digital state requires the formation of a balanced legislative framework that simultaneously ensures the protection of personal data and takes into account the interests of the state, society, and individuals. Additionally, the necessity of international unification of personal data processing rules, particularly within the context of the Eurasian Economic Union, as well as the harmonization of relevant national legislations, has been highlighted.

1. Bogdanovskaya, I. Yu. (2011) The concept of ‘e-State’: legal aspects. In: Informatsionnoe obshchestvo i sotsial’noe gosudarstvo. Lawyer, pp. 45–56. (In Russ.)

2. Danilov, N. A. (2013) Legal regulation of e-government in foreign countries: Candidate of Legal Sciences dissertation. HSE University, 158 p. (In Russ.)

3. Isakov, V. B. (1984) Legal facts in Soviet law. Legal literature Publ. 124 p. (In Russ.)

4. Kamalova, G. G. (2020) Legal Support for Information Confidentiality in the Context of Information Society Development: Candidate of Legal Sciences dissertation. Institute of State and Law of the Russian Academy of Sciences, 472 p. (In Russ.)

5. Savelyev, A. I. (2021) Scientific-practical article-by-article commentary to the Federal Law “On Personal Data”. 2-nd ed. Statut, 468 p. (In Russ.)

6. Tereshchenko, L. K. (2011) Legal regime of information: Doctor of Legal Sciences dissertation. Institute of Legislation and Comparative Law, 415 p. (In Russ.)

7. Polyakova, T. A. (2008) Legal support of information security in building an information society in Russia: Candidate of Legal Sciences dissertation. Russian Legal Academy of the Ministry of Justice of the Russian Federation, 438 p. (In Russ.)

8. Beldad, A., Geest, T. van der, Jong, M. de, Steehouder, M. (2012) A cue or two and I’ll trust you: Determinants of trust in government organizations in terms of their processing and usage of citizens’ personal information disclosed online. Government Information Quarterly, vol. 29, no. 1, pp. 41–49. DOI: https://doi.org/10.1016/j.giq.2011.05.003

9. Beldad, A., Jong, M. de, Steehouder, M. (2011) I trust not therefore it must be risky: Determinants of the perceived risks of disclosing personal data for e-government transactions. Computers in Human Behavior, vol. 27, no. 6, pp. 2233–2242. https://doi.org/10.1016/j.chb.2011.07.002

10. Froomkin, M. A. (2009) Government Data Breaches. Berkeley Technology Law Journal, vol. 24, no. 3, pp. 1019–1059. URL: https://www.jstor.org/stable/24118272

11. Tolbert, C. J., Mossberger, K. (2006) The Effects of E-Government on Trust and Confidence in Government. Public Administration Review, vol. 6, no. 3, pp. 354–369. URL: https://www.jstor.org/stable/3843917

12. Pasquale, F. (2015) The Black Box Society: The Secret Algorithms That Control Money and Information. Harvard University Press. 304 p.