I-Federal Law-152 "Ekuvikelweni Kwedatha Yakho" isebenza kuzo zonke izinhlangano ezikhona: abantu ngabanye nezinhlangano ezisemthethweni, izinhlangano zikahulumeni wobumbano nohulumeni basekhaya. Eqinisweni, lo mthetho usebenza kunoma iyiphi inhlangano ecubungula imininingwane nedatha yomuntu siqu yezakhamizi ze-Russian Federation, kungakhathaliseki ukuthi hlobo luni lobunikazi nobukhulu benhlangano.
Kwesinye isikhathi inhlangano, kungazelelwe yona ngokwayo, ingathola ekuqaleni amasistimu olwazi oluyimfihlo lwedatha yomuntu siqu (PD). Isibonelo, inkampani ithathwa njenge-opharetha yedatha yomuntu siqu uma iwebhusayithi yayo inamafomu empendulo, ukubhaliswa, ukugunyazwa nezinye izinhlobo zokuqoqwa kwedatha okungakhonjwa ngazo isihloko.
Ukulawula nokugadwa mayelana nokuhambisana nezidingo zomthetho wenhlangano "Kudatha Yabantu" kwenziwa abalawuli:
- I-Roskomnadzor mayelana nokuvikelwa kwamalungelo ezihloko zedatha yomuntu siqu;
- I-FSB yaseRussia mayelana nokuhambisana nezidingo emkhakheni we-cryptography;
- I-FSTEC yaseRussia ngokuhambisana nezimfuneko zokuvikela ulwazi ekufinyeleleni okungagunyaziwe nokuvuza ngamashaneli obuchwepheshe.
Njengoba uMthetho Wombuso othi "On Personal Data" uyisisekelo kuphela sokusekelwa ngokomthetho ukuze kuvikelwe idatha yomuntu siqu, izidingo zawo zabe sezicaciswa ezenzweni zikahulumeni waseRussia Federation kanye noMnyango Wezokuxhumana, kanye neminye imibhalo elawulayo neyendlela yokusebenza. abalawuli.
Iziphathimandla zikahulumeni ezilawula imisebenzi emkhakheni wokucubungula idatha yomuntu siqu
- I-Roskomnadzor (I-Federal Service for Supervision of Communications and Mass Communications) - isebenzisa ukulawula nokugada phezu kokuthotshelwa kokucubungula kwe-PD nezimfuneko zomthetho.
- I-FSTEC yaseRussia (I-Federal Service for Technical and Export Control) - isungula izindlela nezindlela zokuvikela ulwazi kusetshenziswa izindlela zobuchwepheshe.
- I-FSB yaseRussia (I-Federal Security Service ye-Russian Federation) - isungula izindlela nezindlela zokuvikela ulwazi ngaphakathi kwamandla ayo (umkhakha wokusetshenziswa kwezindlela ze-cryptographic zokuvikela ulwazi)
Yonke inhlangano ecubungula idatha yomuntu siqu ibhekene nenkinga yokuletha amasistimu ayo olwazi ekuthobelaneni nezimfuneko zomthetho. Ukuvikelwa kwedatha yomuntu siqu kungenye yezinkinga ezicindezela kakhulu, hhayi eRussia kuphela, kodwa nakwamanye amazwe.
Izinhlobo zedatha yomuntu siqu
Ngokomthetho we-Federal Law No. 152, idatha yomuntu siqu inoma yiluphi ulwazi oluhlobene nomuntu okhonjwe noma onqunywe ngesisekelo solwazi olunjalo (isihloko sedatha yomuntu siqu). Isibonelo: igama eligcwele, idethi kanye nendawo yokuzalwa, ikheli, umndeni, umphakathi, isimo sempahla, imfundo, njll.
Idatha yomuntu siqu ihlukaniswe ngezigaba ezimbalwa:
Khethekile
Idatha yomuntu siqu ehlobene nobuhlanga, ubuzwe, imibono yezepolitiki, izinkolelo zezenkolo noma zefilosofi, isimo sezempilo, impilo yangasese
I-Biometric
I-PD, ebonisa izici zomzimba nezebhayoloji zomuntu, ngesisekelo lapho ubunikazi bakhe bungasungulwa futhi ezisetshenziswa opharetha ukuthola ubunikazi besihloko sedatha yomuntu siqu.
Okunye
I-PD ehlobene nomuntu okhonjwe ngokuqondile noma ngokungaqondile noma okhonjwa futhi ongangeni kulezi zigaba ezingenhla.
Kutholakala esidlangalaleni
I-PD itholwe emithonjeni etholakala esidlangalaleni lapho idatha yashicilelwa khona ngemvume ebhaliwe yesihloko sedatha yomuntu siqu
Ukucutshungulwa kwedatha yomuntu siqu yinoma yisiphi isenzo (ukusebenza) noma isethi yezenzo ngedatha yomuntu siqu kusetshenziswa noma ngaphandle kwamathuluzi okuzenzakalela, okuhlanganisa:
- iqoqo,
- ukuqopha,
- ukwenza uhlelo,
- ukuqongelela,
- isitoreji,
- ukucaciswa (buyekeza, shintsha),
- ukukhishwa,
- ukusetshenziswa,
- ukudluliswa (ukusabalalisa, ukuhlinzeka, ukufinyelela),
- depersonalization,
- ukuvimba,
- ukususa,
- ukucekelwa phansi kwedatha yomuntu siqu.
Isibopho sokuphulwa komthetho
Ngokwe-Article 24 ye-Federal Law No. 152, abantu banesibopho sokwephula umthetho ngokuhambisana nomthetho we-Russian Federation.
Lapho uhlola inkampani, abalawuli baqondiswa yi-Federal Law-152 kanye nenani lemithetho kamasipala. Ukuhlola kungase kube okuhleliwe noma okungahleliwe - ngokusekelwe emaqinisweni okuphulwa, kanye nokuqapha umyalelo okhishwe ngaphambilini wokuqeda.
Abantu abephula izimfuneko zokuvikelwa kwedatha yomuntu siqu bangase babhekane hhayi nje kuphela necala lokuqondiswa kwezigwegwe, kodwa futhi necala lokuphatha kanye nelobugebengu.
Ungahambisana kanjani nezidingo zeFederal Law-152?
Ngakho, inkampani noma inhlangano ecubungula idatha yomuntu siqu noma olunye ulwazi olubucayi kufanele ivikele lolu lwazi ngokuvumelana nomthetho. Lokhu akudingi nje kuphela ubungoti obujulile, ulwazi kanye nesipiliyoni, kodwa futhi kuhlotshaniswa nobunzima bezobuchwepheshe kanye nezindleko ezinkulu.
Ngokwencazelo esemthethweni evunywe i-FSTEC, “...Ukuvikeleka kwedatha yomuntu siqu isimo sokuphepha kwedatha yomuntu siqu, ebonakala ngekhono labasebenzisi, izindlela zobuchwepheshe kanye nobuchwepheshe bolwazi ukuze kuqinisekiswe ukugcinwa kuyimfihlo, ubuqotho kanye nokutholakala kwedatha yomuntu siqu lapho kucutshungulwe ezinhlelweni zolwazi lwedatha yomuntu siqu..."
Ukuze ufeze izidingo zenhlangano, zomthetho kanye nezobuchwepheshe ze-Federal Law 152 ngokwakho, udinga ukufunda hhayi umthetho kuphela, kodwa futhi nemithetho kamasipala, futhi uthole ukuthi yiziphi izinyathelo okufanele zithathwe. Ochwepheshe bomsebenzi wangaphandle bangakwazi ukufunda izinqubo zokucubungula idatha yomuntu siqu enkampanini, badwebe imibhalo edingekayo, benze izinyathelo zokuphepha, njll.
Uhlelo oluphelele lokuvikela ulwazi luhlanganisa:
- Amathuluzi Okuvimbela Ukungena (IDS).
- I-Firewall (FW).
- Ukuvikelwa kuhlelo olungayilungele ikhompuyutha.
- Uhlelo lokuqapha nokurekhoda imicimbi yokuphepha.
- Uhlelo lokuvikela i-cryptographic yeziteshi zokuxhumana (ukubethela).
- Izindlela zokuvikela imvelo ebonakalayo, uhlelo lokuvikela ekufinyeleleni okungagunyaziwe (ATP), ukuhlonza nokulawula ukufinyelela.
- Ukuhlaziya ukuphepha/isistimu yokuthola ubungozi, njll.
Ngaphezu kwalokho, ukuphepha kolwazi olubanzi akubandakanyi nje kuphela izindlela zobuchwepheshe, kodwa futhi nezinyathelo zenhlangano.
I-Cloud FZ-152: izici zokuqalisa
Abahlinzeki abambalwa base-Russian bahlinzeka ngamasevisi ngokuhlinzekwa kwengqalasizinda yefu yokusingatha amasistimu olwazi ngokuhambisana nezidingo zomthetho wombuso mayelana nedatha yomuntu siqu. Uma amasistimu eklayenti asingathwe emafini, umhlinzeki uthatha izindaba eziningi zokuphepha kolwazi, okuhlanganisa nalezo ezihlobene nokuvikelwa kwedatha yomuntu siqu. Uma uthuthela emafini, kuzovikela ingqalasizinda ye-IT, futhi lokhu kuzosusa eminye yezibopho kuklayenti. Isibonelo, umhlinzeki ufeza izimfuneko ze-Federal Law 152 mayelana nokuvikelwa kwendawo yokwenza izinto ezibonakalayo.
Abahlinzeki bangaphinde banikeze amakhasimende ukwesekwa kochwepheshe ekuxazululeni inkinga yokuvikelwa kwedatha: ukunquma izinga elidingekayo lokuphepha futhi, ngokuvumelana nalokhu, ukunikeza inketho yokuqalisa; ukuthuthukisa imibhalo ukuze ihambisane nezidingo zomthetho we-Russian Federation.
Ifu elivikelekile lizosiza ukukhulisa izindleko zenhlangano ngokunciphisa izindleko zokudala nokugcina ingqalasizinda ye-IT kanye nesistimu yokuphepha yolwazi lwangaphakathi. Ngokuvamile, ochwepheshe abaqeqeshiwe banikeza ukwesekwa nokusekelwa kwezobuchwepheshe okuphelele, okuhlanganisa ukubonisana nokuthuthukiswa kwephakheji lamadokhumenti ukuze agunyazwe iziphathimandla ezilawulayo, futhi inkundla yokulethwa kwezinsizakalo ihlangabezana nezindinganiso eziqinile zobuchwepheshe futhi ihlangabezana nezidingo zenhlangano ezidingekayo. Amaklayenti angasebenzisa izinsiza ngokulungiselela imibhalo edingekayo kanye nokuvikela i-ISPD ezingeni lesicelo kanye nesistimu yokusebenza.
Izinqubo zokulawulwa kobungozi nokuba sengozini, uphenyo lwezigameko, ukucwaningwa kwamabhuku ezokuphepha kwangaphakathi nangaphandle, kanye nokuqapha nokuhlolwa njalo kwenethiwekhi, izinhlelo kanye nezinqubo zokuphepha kolwazi nakho kuhlinzekiwe. Ochwepheshe abaqeqeshiwe bahlinzeka ngosekelo lwengqalasizinda ye-IT engu-XNUMX/XNUMX.
Zihlanganiswe ndawonye, lezi zinyathelo ziqinisekisa ukuthobela imithetho yenhlangano ephathelene nokuvikelwa kwedatha yomuntu siqu.
Inkundla eqinisekisiwe
I-IBS DataFort inikeza insizakalo enjalo esekelwe . Zonke izingxenye zobuchwepheshe, amathuluzi okuphatha kanye namathuluzi e-virtualization ale nkundla ahambisana nezinkambiso nezimfuneko ze-Federal Law-152.
Ukwakhiwa kwefu elivikelekile le-IBS DataFort.
Inkundla ihlinzeka ngokuvikeleka okuqinisekisiwe kwe-ISPD (kufika ezingeni lokuqala lokuvikeleka elibandakanya), i-GIS (kuze kufike futhi kuhlanganise nesigaba sokuqala sokuphepha) kanye nokugcinwa kwedatha okuvikelekile esikhungweni sedatha se-Tier III. Isiteji sisebenzisa ama-firewall aqinisekisiwe, amathuluzi okuthola ukungena kanye nokuvimbela (IDS/IPS), ukubethela kweziteshi zokuxhumana (GOST VPN), ukuvikelwa kwe-anti-virus, ukuvikela ekufinyeleleni okungagunyaziwe, ukuvikelwa kwemvelo ye-virtualization, kanye namathuluzi okuskena okuba sengozini.
futhi kuyisixazululo esifanelekile salabo abanezidingo eziphakeme zokugcinwa kuyimfihlo nokuvikelwa kwedatha, abafuna ukuqinisa isithunzi sebhizinisi labo noma ukuthola inzuzo enjalo yokuncintisana njengezinga eliphakeme eliqinisekisiwe lokuphepha kolwazi.
Indlela "yokuhambisa" efwini elinjalo? Ingabe “ukufuduka okungenamthungo” kungenzeka? Impela. Isibonelo, i-IBS DataFort idlulisela ngokuphephile i-ISPD efwini layo elivikelekile, inciphisa isikhathi sokuphumula kanye nomthelela ezinqubweni zebhizinisi zenkampani (kuhlanganise nezingosi zangaphandle).
Ukuletha ingqalasizinda ye-IT ekuhambisaneni ne-Federal Law-152
Inqubo yokuletha ingqalasizinda ye-IT yeklayenti ekuthobeleni nezidingo ze-Federal Law-152 iqala ngocwaningomabhuku kanye nokuhlolwa kwezinga lamanje lokuphepha.
Ukuhlolwa kwengqalasizinda ye-IT yeklayenti kufaka phakathi ukuhlolwa kokucubungula nokuvikelwa kwedatha yomuntu siqu kanye nokuhlolwa kohlelo lolwazi lwekhasimende. Umbiko wenhlolovo udwetshwe nencazelo enemininingwane yezinqubo zokucubungula i-PD ngokombono wezobuchwepheshe.
Umsebenzi uhlanganisa nokumodela izinsongo kanye nabahlaseli kanye nokudweba umbiko wokunquma izinga lokuphepha le-ISPD. Ngokusekelwe emiphumeleni yocwaningo, ukucaciswa kobuchwepheshe okuyimfihlo kwesistimu yokuvikela ye-ISPD kukhiqizwa futhi kuchaze izidingo zesistimu edizayinelwe.
Isethi yezinqubomgomo, imiyalelo, izimiso kanye neminye imibhalo yokuvikela idatha yomuntu siqu iyathuthukiswa. Ngesikhathi esifanayo, ochwepheshe bazama ukwandisa izindleko zekhasimende ekusebenziseni izinyathelo zokuphepha.
I-IBS DataFort ihlinzeka ngezinsizakalo zokulungiselela imibhalo nokuvikela i-ISPD ukuze ihambisane nomthetho wenhlangano ekuvikelweni kwedatha yomuntu siqu futhi ingasiza ekulungiseleleni nasekudluliseni izitifiketi (ISPD, GIS, AS).
Isitifiketi senziwa ngabacwaningi mabhuku abazimele abagunyazwe yi-FSTEC kanye ne-FSB yaseRussia. Ukudlulisa isitifiketi esinjalo kuqinisekisa ukuvikelwa okuthembekile kwedatha yomuntu siqu yozakwethu benkampani namakhasimende ezinsongweni zangaphandle, kanye nokuhambisana okuphelele nezidingo zokulawula. Kubalulekile ukuthi amaklayenti athole ukunethezeka "kwesitolo esisodwa-stop": yonke into ihlinzekwa inkampani eyodwa - IBS DataFort.
Ku-opharetha wedatha yomuntu siqu, lokhu kusho ukulungela ukuhlolwa yi-Roskomnadzor, i-FSTEC kanye ne-FSB, ukususa ubungozi bokuvimbela izinsiza, nokungabikho kwezimangalo nezijeziso ezivela kumlawuli.
Le sevisi ifaneleka ezigabeni eziningi zamakhasimende kuhulumeni nengxenye yebhizinisi futhi ingase idingeke ngabasebenza ngedatha yomuntu siqu abafuna ukwenza imisebenzi yabo ihambisane nomthetho. Ukubeka i-IP engxenyeni evaliwe yengqalasizinda yomhlinzeki, egunyazwe ngokwawo wonke amazinga adingekayo kanye nezidingo, kukhulula ikhasimende esidingweni sokuhlela ngokuzimele wonke umsebenzi.
Source: www.habr.com