Perspective "product" and limits of personal data protection

in #informatoque7 years ago

Who among us at least once did not think to stick the camera on your computer? Yes, many experts consider this action today as ordinary as closing the front door, returning home (of course, if you own information of value).

Protection of personal data and our private life in recent years has become a real subject of "worship" not only of politicians and lawyers, but also of ordinary citizens. For the disclosure or non-disclosure of personal data leaks, the punishment is toughened, the number of those held accountable is increasing steadily.

Business does not stand still, in the active phase of the discussion - an initiative to pay Russians for using their data. Well, why not create an information market on which to indicate all the rules for regulating its processing and turnover?

Yes, to work with already "not our" data, it is planned to create certain intermediary companies controlled by the state, who, on the first prepaid request of business, will be ready to provide an impersonal data set (and possibly only partially impersonal). And while there are disputes about commercial and corruption risks of such innovation, enterprising owners of various kinds of information are being prepared for sale.

I admit that not only lawyers today are amused to observe various kinds of regulatory attempts, when Russian "lawyers" believe that they will be able to protect minors and protect their data by obtaining the appropriate consent of parents, registering in social networks on the passport and other initiatives. Only in the last 3 years the number of cybercrimes in Russia has increased more than 6 times, and reached about 70 thousand per year.
Recall at least a recent case of the VKontakte network, which unsuccessfully demanded to stop using the open profile data of hundreds of millions of users. But the Double Data service, which took into account information from the social network to determine the creditworthiness of citizens - only one of many. This paradox, when associated with the state-controlled structures of the company, are on the wave of "free exchange" with almost any information, and other aggregators, in their opinion, unacceptably monopolize the information market.

The advisers of the working groups created under the presidential administration do not hide the fact that the user data of Russians officially should be recognized as the property of the state. According to experts, what we "released into the information space" does not belong to us anymore, which means that the authorities should also be in charge of control, but not foreign corporations.

I hope now it is clear why server equipment for processing personal data of Russians should be installed exclusively in the territory of the country, and encryption without providing keys to relevant services is unacceptable. Even the freedom-loving Facebook surrendered, the corporation was difficult, painful, but eventually they also agreed to work according to the Chinese rules of interaction with the authorities (and hence in other countries a similar scenario is possible).

The sensational law of Yarovaya also has analogues, even last year Germany decided to collect information. True, the EU does not plan to collect data "what was written or said", but only information about the place of connections and subscribers (and even then, for a couple of months). The most closely related to the Russian law is the information security program of China, and in the United States, as in the United Kingdom, such data are obtained through the courts or by the so-called national security letter (the official version).

The European Court of Human Rights has already voiced its position: the massive retention of Internet traffic and geolocation information is undoubtedly an interference in the privacy of citizens and opens up many options for abuse. But only European Internet providers can breathe, the decision actually frees them from the need to fulfill local quirks to accumulate and store personal information of citizens. Yes, and to give personal data to users in countries where the degree of protection is lower than in the EU, companies are not allowed (a fine of up to 4% of annual turnover is too large).

At us the media-communication union has started development of the Infocommunication Code, which is likely to replace the "positive" laws of excessive branch regulation of recent years. It intends to drastically change the approaches of the law, where the opportunities and risks will be collected, as well as the conditions ensuring the protection of constitutional rights to the inviolability of private life. Excuse me, but here we can not help but watch and wave, smile and ... :)

Will there be anything from this idea of ​​the business community to unify the information and telecommunications legislation while working with the State Duma's profile committees, will only time show.

Meanwhile, the government is discussing the possibility of insurance of companies' risks, from the loss of one of the most significant assets - information. It will still be necessary to allocate separate directions for working with the protection of personal data, but also to bear the additional costs of financial guarantees and insurance. Such he, the most profitable business in Russia - under the name of state activity ...

Photo sources 1, 2, 3