The subject of this paper is the international regulatory framework regarding information security and the protection of the right to the security of personal data. The aim of this paper is to analyze international documents that regulate information security and personal data protection. Information security encompasses strategies designed to protect the confidentiality, integrity and availability of data, while personal data refers to information that can directly or indirectly identify an individual. The European Union has adopted various documents aimed at regulating information security and personal data protection, among which the General Data Protection Regulation (GDPR) from 2016 is particularly significant. It is a regulation that guarantees certain individual rights, such as the request for consent before data processing, the right to delete personal data, the right to correct inaccuracies and the right to file a complaint with a supervisory authority if an individual's rights are violated. The consent of the individual whose data is used is necessary for the processing of personal data. The individual must be informed about the purpose and duration of the data processing, the subjects with whom their data may be shared, the rationale for any automated processing and the possible consequences, especially in situations involving profiling. In addition, individuals retain the right to revoke consent to the processing of their personal data at any time, without affecting the lawfulness of any previous processing action. Before giving consent, individuals are informed of the possibility of withdrawing it at any time. In order to achieve GDPR compliance, many organizations and public figures are mandated to appoint a data protection officer. In case of violation of the right to information security and the right to the protection of personal data, individuals can apply to the European Court of Human Rights. In cases of personal data breaches, legal entities can face significant fines, potentially amounting to 4 % of their total annual global turnover from the previous year or €20 million, whichever is greater.