"High rates of informatization of modern technologies increase the risks of vulnerabilities in information security systems of organizations and are used by violators for unauthorized receiving of personal data and intellectual property. This determines the urgency of the present research. The concept of personal data is enshrined in the Federal law 152-FZ "On personal data" 07.07.2006. According to Article 3 of the law personal data is any information relating to the person (the subject of personal data) including his surname, name, middle name; date and place of birth; address; marital, social and property status; education; profession; income etc. Thus, it is possible to identify a concrete person by means of personal data. Therefore, according to law the access to such information is limited by the scope of persons. Due to the wide use of personal data, there is a question of protection of the legal framework of a person. Article 5 of the law "On personal data" establishes the following principles of processing personal data. Firstly, processing of personal data has to be limited by achieving concrete, predetermined and lawful purposes. Secondly, processing of personal data, which do not serve the purpose of their processing, is not allowed. Moreover, the content and volume of the personal data under procession have to correspond to the stated purposes of processing, that is the processed personal data should not be superfluous. Subjective circumstances are the main reason for the leakage of key information. The internal violator uses a human factor for establishing the organized criminal group and reports information to the external violator. To increase the protection of information, the system of complex organizational and legal measures is offered. Legislative suggestions for improving the articles of criminal and criminal procedure codes and the order of the RF Ministry of Internal Affairs have been made."