Protection of personal information. Information leak. Damage, consequences, risks. DLP systems. Confidentiality.
According to the Solar Dozor Product Center of Rostelecom, from the end of March to the beginning of June 2020, the number of information leaks increased by 25%, Kommersant writes. In December, the situation improved, but this does not negate the consequences. At the end of 2020, the damage caused, according to corporate data, was more than 3 billion rubles.
Often such incidents are caused by the low level of digital competencies of employees. To minimize the likelihood of leaks, companies are implementing automated employee behavior checks. In case of violation of the personal data of users, the responsibility of the business is enshrined at the legislative level. The company will have to pay a fine of 25 to 50 thousand rubles.
Having received personal data from customers, attackers can use social engineering methods in fraudulent schemes or send intrusive advertising of goods and services. If trade secret documents, such as tender documents, key transaction data, or confidential technological information, fall into the wrong hands, this can lead to a loss of competitive advantage.
All leaks can be divided into intentional and unintentional. Unintentional losses are often associated with people and through the fault of employees. Thus, in connection with the massive transition to remote work, in 2020 the number of incidents involving ordinary users in companies increased by almost 15%. Another common reason is insufficient investment in data protection.
To avoid leaks caused by employees, companies use DLP systems. These are means of monitoring and tracking the actions of employees. According to Rostelecom, more than half of the companies are already using these solutions or want to implement them next year. In case of suspicion of incorrect work with data or during the investigation of an incident, an information security specialist will be able to analyze all the actions of an employee on a corporate device in relation to confidential company data. What information, documents and files and through what channels the employee transferred, to what media and to what data storage he uploaded.
Then what about employee privacy? It will be necessary to conclude a special supplementary agreement to the employment contract, which will indicate that control systems are installed on the company's devices.
Elizaveta Razina, Senior Associate at the Vetrov & Partners law firm, will tell you how to minimize the risks of leaks.
On the one hand, the recipe for the solution is simple. It is necessary to ensure proper regulation of relations and control over its implementation. On the other hand, who will control the control itself and how much regulation will be proper? This is a question. Plus, will it be possible to take measures to eliminate the consequences of violations, if any do occur. That is why the inevitability of punishment or the insignificance of such punishment multiplied by the low probability increases the risks of violations in this area.
We will be happy to provide you with legal assistance regarding the minimization of legal risks and available opportunities. We will try to find a solution that is right for you.
Call +7 (383) 310-38-76 or write to info@vitvet.com.
We recommend that you read our blog dedicated to legal and judicial cases (arbitration practice) and read the materials in the "Articles" section.
Our law firm provides various legal services in different cities of Russia (including Novosibirsk, Tomsk, Omsk, Barnaul, Krasnoyarsk, Kemerovo, Novokuznetsk, Irkutsk, Chita, Vladivostok, Moscow, St. Petersburg, Yekaterinburg, Nizhny Novgorod, Kazan, Samara, Chelyabinsk, Rostov-on-Don, Ufa, Volgograd, Perm, Voronezh, Saratov, Krasnodar, Togliatti, Sochi).
We will be glad to see you among our clients! Call or write right now!
Phone +7 (383) 310-38-76
Email info@vitvet.com
Law firm "Vetrov and partners"
more than just legal services
WhatsApp
Telegram