LIMITS OF BIG DATA PROCESSING FOR THE PURPOSES OF OBTAINING INFORMATION ABOUT A PERSON: A LEGAL ASPECT

The article studies public relations regarding the analysis and processing of big data and the results of such processing. The author notes the need for a normative definition of the concept of big data, taking into account the purpose of their collection and processing (creation of new information). It is noted that storing and processing big data in a unified information system of social networks or digital ecosystems for behavioural targeting purposes make it possible to create new information about users, which can be classified as special categories of personal data. It is proposed to evaluate such information taking into account its reliability and attribute it to personal data only after the user’s consent has been issued. The author concludes that it is necessary to legislate the subject’s right to receive information about the algorithms for processing big user data in case of personification of the information received. He also underlines the need for observing the principle of compliance of the content and volume of data with the declared purposes of their automated processing. It is proposed to legislate the obligation of the operator of personal data to de­personalize the personal data themselves and the information obtained as a result of their processing. Also personal data should be stored in such a way that they cannot be personalized in case of unauthorized access.