RESEARCH OF PROBLEMS OF ENSURING THE SECURITY OF PERSONAL DATA AND CONFIDENTIAL INFORMATION IN THE CONTEXT OF COUNTER-OSINT

Abstract

In today’s world, the issue of personal data protection is becoming particularly relevant as technological advancements and the widespread use of open information sources create new security challenges. This article examines the legislative aspects of data regulation in various jurisdictions, particularly in Ukraine and the EU, as well as practical threats such as social engineering, phishing, and doxing. Based on an analysis of the General Data Protection Regulation (GDPR) and the Ukrainian Law “On the Protection of Personal Data”, the authors highlight significant discrepancies in the legislation regulating data confidentiality. Special attention is given to current threats to personal data in the context of information security, such as attacks carried out through social engineering. The article investigates the activities of hacker groups that use personal data to create fake profiles in messaging platforms to obtain sensitive data or gain access to accounts. Examples of OSINT technologies used by attackers to gather data from open sources are discussed, along with their application in doxing, where personal data is published without individual consent, posing potential security risks. The article also addresses the growing risks of phishing attacks targeting email and browser users, including new tactics like multi-stage phishing, which complicates the detection and blocking of such attacks. Additionally, it emphasizes the importance of media literacy and cyber hygiene in reducing privacy risks and increasing awareness of safe practices for working with information technologies. The article concludes by underscoring the need for a systematic approach to data privacy protection, including legal regulation, the adoption of modern information protection technologies, and an increase in media literacy among the population. Proposed measures include the implementation of European data protection standards, which could provide a reliable foundation for strengthening personal data protection in Ukraine.