MANAGEMENT SYSTEM FOR THE PROTECTION OF PERSONAL DATA OF CLIENTS IN SOCIAL INSTITUTIONS

Abstract

The study presents the development of the concept of a Unified Personal Data Management System for social institutions, focused on ensuring the protection of personal data of clients. The main focus is on analyzing modern cyber threats such as phishing attacks, malware, and distributed denial-of-service attacks, as well as identifying organizational vulnerabilities that contribute to their implementation. The architecture of a centralized system integrated with existing information platforms is proposed. The system implements secure data exchange using modern cryptographic methods and strict access control mechanisms. Special attention is paid to the issues of authentication of system operators, for which multifactor authentication mechanisms are provided, in particular, the use of one-time passwords and unique tokens for electronic signatures. The developed system provides users with a set of tools for managing personal data, including viewing access logs, configuring processing parameters, and the ability to delete or correct information. The functionality is accessed through specialized interfaces, including mobile applications and web portals. To counter network attacks, a set of protective measures based on the use of distributed content delivery networks and machine learning algorithms for analyzing network traffic is proposed. The work carried out a comprehensive assessment of the risks associated with the implementation of the system, taking into account technical limitations, personnel issues and requirements for operational reliability. Methodological recommendations have been developed for the phased implementation of the system, aimed at minimizing the organizational burden. The results of the study make it possible to significantly increase the level of personal data protection, ensure compliance with legal requirements and strengthen users' trust in social institutions.