ISSN 2410-3594
e-ISSN 2786-7382
UDC 34; 159.9
Scientific Journal of the National Academy of Internal Affairs
- cybersecurity; personal data; legal regulation; information security; data protection; offences; damages
- https://doi.org/10.63341/naia-herald/3.2025.98
- Pages 98-111
This study aimed to examine the impact of judicial precedents in cases concerning the leakage of personal and corporate data on the development of legal practice and business strategies. The research involved an analysis of key court cases, which made it possible to determine how these incidents have influenced corporate liability and behaviour. The study addressed cases such as Equifax, Facebook-Cambridge Analytica, British Airways, T-Mobile, and the Ukrainian mobile operator Kyivstar. The rulings in these cases not only imposed fines but also established new principles of corporate ethics, requiring companies to adopt a systematic approach to personal data protection, ensure transparency in user interactions, and strengthen their internal legal culture. The number of incidents continues to grow: since 2024, there has been a 25% increase in recorded data breaches compared to previous years. This demonstrates that data breaches are no longer regarded merely as technical issues but have become legally significant events with substantial economic and regulatory implications. In response, businesses are compelled to reconsider their strategies, implement new data protection policies, and incorporate potential legal risks into risk management frameworks. The practical significance of the issue lies in the fact that analysing major cases enables the forecasting of possible consequences of data breaches, the assessment of legal risk levels, and the development of effective strategies for accountability and prevention
References
[1] Alessi, A., Ciccarelli, G., Cipolli, L., Guidotti, L., Marsano, A., & Hanganu, A. (2021). Privacy by design and by default in software development in order to prevent unlawful processing of personal data. Privacy certifications impact on software development and liabilities. Retrieved from https://surl.li/fmkrem.
[2] Bem, M., & Horodysky, I. (2019). Liability for violation of personal data protection legislation: Problems of compliance of Ukrainian legislation with the requirements of the European Union regulation on the protection of personal data (GDPR). Law of Ukraine, 2, 237-255.
[3] Bernaziuk, O.O. (2023). Judicial precedent in the legal system of Ukraine: Modern approaches to the definition of the concept. Uzhhorod National University Herald. Series: Law, 1(80), 403-410. doi: 10.24144/2307-3322.2023.80.1.60.
[4] Bhadouria, A.S. (2022). Study of: Impact of malicious attacks and data breach on the growth and performance of the company and few of the world’s biggest data breaches. International Journal of Scientific and Research Publications, 10(10). doi: 10.29322/IJSRP.X.2022.p091095.
[5] Bond, M., Human, K., & Kwon, N. (2022). Analysis and implications for Equifax data breach. Retrieved from https://cs.ucf.edu/~mohaisen/doc/teaching/cap5150/fall2022/cap5150-proj2.pdf.
[6] Diniyatullah, L., & Rindu, K.B. (2024). Crisis management and recovery strategies after a data leak: Equifax case study. Journal of Information System and Technology, 1(2), 76-81.
[7] Dumanska, I.Y., Guseva, O.Y., Kazarova, I.O., Gorodetskyy, M., Melnichuk, L.V., & Saienko, V.H. (2022). Personal data protection policy impact on the company development. Transactions on Environment and Development, 18, 232-246. doi: 10.37394/232015.2022.18.25.
[8] Ebuzor, J. (2024). Understanding customer perception of cyber attacks: Impact on trust and security. In
P. Thealla, V. Nadda, S. Dadwal, L. Oztosun & G. Cantafio (Eds.), Corporate cybersecurity in the aviation, tourism, and hospitality sector (pp. 83-111). London: IGI Global. doi: 10.4018/979-8-3693-2715-9.ch005.
[9] European Union Agency for Cybersecurity. (2024). ENISA threat landscape. Iraclion: ENISA. doi: 10.2824/0710888.
[10] Jeong, C.Y., Lee S.-Y., & Lim, J.-H. (2024). Information security breaches and IT security investments: Impacts on competitors. Information & Management, 56(5), 681-695. doi: 10.1016/j.im.2018.11.003.
[11] Khramov, S., & Opirskyy, I. (2024). Analysis of the current state of cyberattacks in Ukraine during the war.
Ukrainian Information Security Research Journal, 26(1), 214-222. doi: 10.18372/2410-7840.26.18842.
[12] Kotenko, M., Karagioz, R., Sopilko, I., Andrusiv, V., & Yermakova, H. (2025). Personal data protection in Ukraine via the prism of European judicial institutions’ practise. Estudios en Derecho a la Información, 10(19), 147-170. doi: 10.22201/iij.25940082e.2025.19.19032.
[13] McLymore, A., & Bartz, D. (2020). T-Mobile-Sprint merger wins approval from U.S. judge. Retrieved from https://www.reuters.com/article/technology/t-mobile-sprint-merger-wins-approval-from-us-judge-idUSKBN2042MG/.
[14] Nejad, L.P. (2023). Mitigating data loss and its impact on modern software engineering: A case study approach. Journal of Applied Intelligent Systems & Information Sciences, 4(2), 52-60. doi: 10.22034/JAISIS.2023.418932.1072.
[15] Nekit, K. (2020). Personal data and industrial data as objects of ownership: Evaluation of perspectives.
Journal of Civil Studies, 36, 57-64. doi: 10.32837/chc.v0i36.202.
[16] Paraskevas, A. (2022). Cybersecurity in travel and tourism: A risk-based approach. In Zh. Xiang,
M. Fuchs, U. Gretzel & W. Höpken (Eds.), Handbook of e-tourism (pp. 1605-1628). Cham: Springer. doi: 10.1007/978-3-030-48652-5_100.
[17] Pokhylenko, I. (2023). Legal regulation of personal data protection. Legal Bulletin “Air and Space Law”, 4(69), 94-99. doi: 10.18372/2307-9061.69.18322.
[18] Ponemon Institute. (2024). Beyond the balance sheet: The real costs of data breaches in 2024. Retrieved from https://f12.net/blog/beyond-the-balance-sheet-the-real-costs-of-data-breaches-in-2024/?utm.
[19] Romanosky, S. (2016). Examining the costs and causes of cyber incidents. Journal of Cybersecurity, 2(2), 121-135. doi: 10.1093/cybsec/tyw001.
[20] Schäfer, F., Gebauer, H., Gröger, C., Gassmann, O., & Wortmann, F. (2023). Data-driven business and data privacy: Challenges and measures for product-based companies. Business Horizons, 66(4), 493-504. doi: 10.1016/j.bushor.2022.10.002.
[21] Singh, A., Klarner, P., & Hess, T. (2020). How do chief digital officers pursue digital transformation activities? The role of organization design parameters. Long Range Planning, 53(3), article. doi: 10.1016/j.lrp.2019.07.001.
[22] Slotwinska, N. (2015). Theoretical and legal approaches to understanding judicial precedent as a component of judicial practice. National Law Journal: Theory and Practice, 15(5/1), 18-21.
[23] Sopilko, I., & Zubko, E. (2024). Data breach and data leak: Legal aspect. Journal of the Kyiv University of Law, 3, 62-68. doi: 10.36695/2219-5521.3.2024.7.
[24] Statistа. (n.d.). Annual number of data compromises and individuals impacted in the United States from 2005 to 2024. Retrieved from https://www.statista.com/statistics/273550/data-breaches-recorded-in-the-united-states-by-number-of-breaches-and-records-exposed/.
[25] Tapkir, R.S. (2023). Privacy in Peril: Rise of data breaches in the entertainment and media industries.
Jus Corpus Law Journal, 4, 443-465.
[26] Tauseef, A. (2023). Database technologies in AI: Transforming cybersecurity with automated threat detection systems. doi: 10.13140/RG.2.2.33122.54727.
[27] Tikkinen-Piri, C., Rohunen, A., & Markkula, J. (2018). EU General Data Protection Regulation: Changes and implications for personal data collecting companies. Computer Law & Security Review, 34(1), 134- 153. doi: 10.1016/j.clsr.2017.05.015.
[28] Tiwari, P. (2022). Misuse of personal data by social media giants. Jus Corpus Law Journal, 3, 1041-1064.
[29] Tripathi, M., & Mukhopadhyay, A. (2020). Financial loss due to a data privacy breach: An empirical analysis. Journal of Organizational Computing and Electronic Commerce, 30(4), 381-400. doi: 10.1080/10919392.2020.1818521.
[30] Voss, W.G. (2021). Airline commercial use of EU personal data in the context of the GDPR, British Airways and Schrems II. Colorado Technology Law Journal, 19(2), 377-428.
[31] Xu, J., Yue, W.T., Leung, A.C., & Su, Q. (2024). Focusing on the fundamentals? An investigation of the relationship between corporate social irresponsibility and data breach risk. Decision Support Systems, 182, article number 114252. doi: 10.1016/j.dss.2024.114252.
[32] Zadereyko, О., Trofymenko, O., Prokop, Y., Loginof potential data leaks in information and communication systems. Radioelectronic and Computer Systems. doi: 10.32620/reks.2022.4.05.