In 2018, the European Union adopted a legislative act that defines the rights of citizens and other data subjects when processing their personal data. The guide contains the principles and criteria of European data protection legislation, mechanisms for applying the rules of law, supervision of observance of the rights of subjects, as well as a comparison of the legislative practices of the EU and the Russian Federation in the field of data protection, case studies, conclusions and decisions of the supervisory authorities of the EU, the Court of Justice of the European Union and European Court of Human Rights.