<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD with MathML3 v1.3 20210610//EN" "JATS-journalpublishing1-3-mathml3.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:ali="http://www.niso.org/schemas/ali/1.0/" article-type="research-article" dtd-version="1.3" xml:lang="en">
  <front>
    <journal-meta>
      <journal-id journal-id-type="publisher-id">legalreport</journal-id>
      <journal-title-group>
        <journal-title>TSUL Legal Report</journal-title>
        <abbrev-journal-title abbrev-type="publisher">TSUL Legal Report</abbrev-journal-title>
      </journal-title-group>
      <issn pub-type="ppub" publication-format="print">2181-1024</issn>
      <publisher>
        <publisher-name>Toshkent davlat yuridik universiteti</publisher-name>
      </publisher>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="other" assigning-authority="relibrary.uz">REL-A-013997</article-id>
      <title-group>
        <article-title xml:lang="en">LEGAL INSTRUMENTS FOR PERSONAL DATA PROTECTION IN BIG DATA ANALYSIS: CONSENT AND CONTRACTS</article-title>
      </title-group>
      <contrib-group content-type="author">
        <contrib contrib-type="author">
          <name>
            <surname>Mamanazarov</surname>
            <given-names>Sardor</given-names>
          </name>
        </contrib>
      </contrib-group>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2025-01-01">
        <day>01</day>
        <month>01</month>
        <year>2025</year>
      </pub-date>
      <pub-date date-type="collection">
        <year>2025</year>
      </pub-date>
      <volume>6</volume>
      <issue>1</issue>
      <fpage>4</fpage>
      <lpage>12</lpage>
      <permissions>
        <license xlink:href="https://creativecommons.org/licenses/by-nc-sa/4.0">
          <ali:license_ref>https://creativecommons.org/licenses/by-nc-sa/4.0</ali:license_ref>
        </license>
      </permissions>
      <self-uri xlink:href="https://relibrary.uz/REL-A-013997/"/>
      <abstract xml:lang="en">
        <p>This article examines the legal aspects of personal data processing conditions and contractual relations in the context of Big Data. The importance of consent in the placement and use of personal data on digital platforms and social networks, user agreements, and mechanisms for obtaining consent for personal data processing have been studied in detail. A comparative analysis of consent requirements established in international documents such as the GDPR, CCPA, PIPA, and the legislation of Uzbekistan has been conducted. Issues related to processing personal data based on legitimate interests in Big Data analysis, and balancing these interests with individual rights and freedoms have been investigated. Problems associated with data processing based on contractual obligations, the activities of data brokers, and the use of publicly posted data on social networks have also been studied. New innovative methods of data processing, particularly step-by-step consent, context-based consent, and automated consent systems, have been analyzed. The legal nature of user agreements on digital platforms as mixed contracts containing elements of license agreements and service agreements has been substantiated. Modern mechanisms for protecting data subjects‘ rights, including procedures for obtaining data subjects‘ consent in automated decision-making and profiling, have been proposed. Based on the research results, practical recommendations for improving national legislation have been developed, particularly proposing additions and amendments to the Law “On Personal Data.”</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>Big Data</kwd>
        <kwd>personal data</kwd>
        <kwd>consent</kwd>
        <kwd>contractual relations</kwd>
        <kwd>data protection</kwd>
        <kwd>user agreements</kwd>
        <kwd>legitimate interests</kwd>
        <kwd>data subject</kwd>
        <kwd>data processing</kwd>
        <kwd>digital platform</kwd>
        <kwd>social networks</kwd>
        <kwd>privacy</kwd>
        <kwd>data brokers</kwd>
        <kwd>automated systems</kwd>
        <kwd>security measures</kwd>
        <kwd>license agreement</kwd>
        <kwd>balance of legitimate interests</kwd>
        <kwd>data owner</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <back>
    <ref-list>
      <ref id="r1">
        <label>1</label>
        <mixed-citation>Guidelines 05/2020 on consent under Regulation 2016/679. Available at: https:// www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_202005_consent_en.pdf</mixed-citation>
      </ref>
      <ref id="r2">
        <label>2</label>
        <mixed-citation>Smith J. Challenges of Consent in Big Data Analytics. Journal of Data Protection and Privacy, 2013, vol. 5(2), pp. 85–87.</mixed-citation>
      </ref>
      <ref id="r3">
        <label>3</label>
        <mixed-citation>Johnson M. Legal Basis for Data Processing in the Era of Big Data. International Journal of Data Law, 2023, vol. 8(3), pp. 148–162.</mixed-citation>
      </ref>
      <ref id="r4">
        <label>4</label>
        <mixed-citation>European Union Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). Official Journal of the European Union, 2016, L119/1.</mixed-citation>
      </ref>
      <ref id="r5">
        <label>5</label>
        <mixed-citation>Buttarelli G. A smart approach: counteract the bias in artificial intelligence. European Data Protection Supervisor, 8 November 2016. Available at: https://secure.edps. europa.eu/EDPSWEB/edps/pid/696 E-ISSN: 2181-1024 Volume 6, ISSUE 1 (2025) TSUL Legal Report 11</mixed-citation>
      </ref>
      <ref id="r6">
        <label>6</label>
        <mixed-citation>Nguyen M.H.C. A user-centred approach to the data dilemma: context, architecture and policy. Digital Enlightenment Forum Yearbook, 2013.</mixed-citation>
      </ref>
      <ref id="r7">
        <label>7</label>
        <mixed-citation>Guidelines on Protection of Privacy and Transborder Flows of Personal Data. Paris: OECD Publishing, 2023, p. 45.</mixed-citation>
      </ref>
      <ref id="r8">
        <label>8</label>
        <mixed-citation>Council of Europe Convention 108+: Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data. Strasbourg, 2023, p. 158.</mixed-citation>
      </ref>
      <ref id="r9">
        <label>9</label>
        <mixed-citation>Federal Trade Commission (US) Data Brokers: A Call for Transparency and Accountability. Washington, 2023, p. 45.</mixed-citation>
      </ref>
      <ref id="r10">
        <label>10</label>
        <mixed-citation>Crain M. The limits of transparency: Data brokers and commodification. New Media and Society, 2018, vol. 20(1), pp. 88–104. DOI:<pub-id pub-id-type="doi">10.1177/1461444816657096</pub-id></mixed-citation>
      </ref>
      <ref id="r11">
        <label>11</label>
        <mixed-citation>Ayusheeva I.Z. Big data: problems of defining the civil law regime. Lex russica, 2023, vol. 76, no. 10, pp. 125–134. DOI:<pub-id pub-id-type="doi">10.17803/1729-5920.2023.203.10.125-134</pub-id></mixed-citation>
      </ref>
      <ref id="r12">
        <label>12</label>
        <mixed-citation>Vasilevskaya L.Yu., Poduzova E.B., Tasalov F.A. Op. cit. pp. 86–88</mixed-citation>
      </ref>
      <ref id="r13">
        <label>13</label>
        <mixed-citation>Puchkov V.O. Posthumous transfer of digital objects: user agreement vs national inheritance law. Inheritance Law, 2020, no. 3, pp. 17–23.</mixed-citation>
      </ref>
      <ref id="r14">
        <label>14</label>
        <mixed-citation>Krasnova S.A. Civil legal status of online platform operators: uncertain present and possible future. Property relations in the Russian Federation, 2022, no. 1, pp. 67–86.</mixed-citation>
      </ref>
      <ref id="r15">
        <label>15</label>
        <mixed-citation>Asia-Pacific Privacy Authorities Implementation Framework for GDPR Standards in APAC Region. Singapore, 2023, p. 124.</mixed-citation>
      </ref>
      <ref id="r16">
        <label>16</label>
        <mixed-citation>International Data Protection Conference Proceedings of the International Conference on Data Protection in Digital Age. Brussels, 2023, p. 156.</mixed-citation>
      </ref>
      <ref id="r17">
        <label>17</label>
        <mixed-citation>Smith J. Challenges of Consent in Big Data Analytics. Journal of Data Protection and Privacy, 2023, vol. 5(2), pp. 85–87.</mixed-citation>
      </ref>
      <ref id="r18">
        <label>18</label>
        <mixed-citation>Wachter, S. Normative challenges of identification in the Internet of Things: Privacy, profiling, discrimination, and the GDPR. Computer law and security review, 2018, vol. 34(3), pp. 436–449. DOI:<pub-id pub-id-type="doi">10.1016/j.clsr.2018.02.002</pub-id></mixed-citation>
      </ref>
      <ref id="r19">
        <label>19</label>
        <mixed-citation>Kamara I., De Hert P. Understanding the balancing act behind the legitimate interest of the controller ground: A pragmatic approach. In Cambridge handbook of consumer privacy Cambridge University Publ., 2018, pp. 321–352. DOI:<pub-id pub-id-type="doi">10.1017/9781316831960.024</pub-id></mixed-citation>
      </ref>
      <ref id="r20">
        <label>20</label>
        <mixed-citation>Competition Law Commission of Japan Report on Big Data Usage in Insurance Sector. 2023.</mixed-citation>
      </ref>
      <ref id="r21">
        <label>21</label>
        <mixed-citation>Privacy Commissioner of Japan Guidelines on Automated Decision Making and Profiling. Tokyo, 2023, p. 85.</mixed-citation>
      </ref>
      <ref id="r22">
        <label>22</label>
        <mixed-citation>Luger E., Rodden T. An informed view on consent for UbiComp. In Proceedings of the 2013 ACM international joint conference on Pervasive and ubiquitous computing. 2013, pp. 529–538. DOI:<pub-id pub-id-type="doi">10.1145/2493432.2493446</pub-id></mixed-citation>
      </ref>
      <ref id="r23">
        <label>23</label>
        <mixed-citation>D’Acquisito G. et al. Privacy by design in Big Data. An overview of privacy enhancing technologies in the era of Big Data analytics. ENISA, December 2015. Available at: https://www.enisa.europa.eu/activities/identity-and-trust/library/deliverables/ big-data-protection</mixed-citation>
      </ref>
      <ref id="r24">
        <label>24</label>
        <mixed-citation>Agarwal S., Steyskal S., Antunovic F., Kirrane S. Legislative compliance assessment: Framework, model and GDPR instantiation. In Annual Privacy Forum, 2018, pp. 131–149. DOI:<pub-id pub-id-type="doi">10.1007/978-3-030-02547-2_8</pub-id></mixed-citation>
      </ref>
      <ref id="r25">
        <label>25</label>
        <mixed-citation>Kuner C., Cate F.H., Lynskey O., Millard C., Loideain N.N., Svantesson D.J.B. Commentary on Article 21 GDPR. In The EU General Data Protection Regulation (GDPR): A Commentary. Oxford University Publ., 2019. 12 TSUL Legal Report Volume 6, ISSUE 1 (2025) E-ISSN: 2181-1024</mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>
