Legal assistance and support with personal data

Due to the widespread information leaks, which is quickly becoming a global problem, personal data requires reliable protection. In 2007, a new federal law #152 was enacted, “Regarding personal data”, which defined the requirements for personal data protection. In accordance with this law, personal data operators are required to develop a set of documents regulating the procedure of processing personal data. The purpose of this service is to assist organizations in creating the sets of documents, which meet all the regulatory requirements.

Group-IB’s attorneys perform the following range of services related to creating and analyzing existing sets of documents related to the procedures of protecting personal data:

• Regulation regarding the roles and responsibilities in processing and protecting personal data;
• Order regarding ensuring security for the personal data processed by the company;
• Regulation regarding personal data processing;
• Rules for providing access to personal data;
• Rules for responding to requests from personal data subjects;
• Rules for classifying personal data information systems;
• Rules for conducting control measures related to personal data protection;
• Rules for registering, storing, and destroying personal data media;
• Rules for personal data backup;
• Rules for interacting with the authorities on the issues of processing and protecting personal data;
• Rules for responding to IT security incidents within personal data information systems;
• Employee instructions regarding the rules for personal data processing;
• Administration instructions regarding password protection for personal data processing systems;
• Subject consent forms for personal data processing.

Since the law took effect, many companies have already managed to develop organizational and administrative documentation related to processing and protecting personal data. However, to maintain the personal data security system updated, it is necessary to conduct regular compliance audits.

Legal assistance and support with personal data

As a result of the analysis of existing documentation conducted by Group-IB’s attorneys, the client receives an independent assessment of the level of compliance with the applicable legislation related the company’s processing and protecting of personal data. In case of absence of such a set of documents, Group-IB’s legal department experts will develop it as per the specificity of the client’s business.

Legal assistance and support with personal data

Development and evaluation of the documentation related to personal data protection will provide the following:

• Unique capabilities. Having constant practice in investigating data leak incidents has allowed Group-IB’s legal department to gain valuable experience in the regulatory matters of processing and protecting personal data. The combination of theoretical knowledge and practical skills ensures a highly-qualified solution to the legal issues of our clients.
• Properly executed documentation. The documentation package is compiled in accordance with the applicable laws, guaranteeing that, should an unlawful act occur, the client will have the capability to protect their interests.
• Minimization of the possibility of unauthorized access. Properly executed organizational and administrative documentation will create an effective system for personal data processing, ensuring reliable protection of confidential information against third-party actions. Legally competent development and evaluation of the documentation will provide the client with legal and financial security, as it allows promptly detecting and eliminating flaws.
• Reliable long-term client relationships. Providing comprehensive personal data protection during processing, based on legally competent regulatory documentation, guarantees an improved level of client confidence and a positive impact on the company’s reputation.