National Data Protection Authorities in the EU: role and practice in the field of personal data protection in social networks

Internal violations of the legislation of personal data protection by online social network services is a problem faced by all states, regardless of the presence or absence of national bodies for monitoring compliance with the legislation on the protection of personal data. However, the key differences that distinguish countries that have relevant authorities from those that do not have any or are entrusted with an authority that is unable to adequately perform the function of data protection are: a lower level of violations of privacy and personal data in social networks; the presence of a real possibility of the state tp protect privacy and personal data in the form of an authorized body, as well as the citizens themselves, to effectively protect their personal data; the ability of the state to flexibly determine the policy and conditions under which this or that social network service will carry out its activities on its territory. Thus, the article examines the peculiarities of legislative regulation and practical activities of national bodies for the protection of personal data in the European Union (Data Protection Authorities (DPA)). The regulatory basis and role in ensuring the privacy and security of personal data of users of social networks have been studied, namely: the grounds for implementation, regulatory provisions that ensure their organization, competence, opportunities for cross-border cooperation and cooperation (joint investigation), as well as the impact on the activity of social services networks in specific countries. The practice of national bodies for the protection of personal data of member states in the EU was analyzed in the context of taking actions related to the protection of personal data in social networks - investigations, imposition of fines, appeals to national judicial institutions, development of requirements for Data Protection Impact Assessment (DPIA) as well as the creation of codes of conduct and certification. On the basis of the obtained results, conclusions regarding the need to introduce separate national data protection authorities in Ukraine are proposed, as well the possibility of DPA influence on the functioning of social network services outside the jurisdiction of the EU member state is outlined.