Annotation

The article examines the problem of forming a legal model of the risk-based approach (RBA) and risk management system (RMS) in the data economy. The authors point to the insufficiency of current legislation, where the basic RBA and RMS model is formed exclusively for control and supervisory activity and does not account for the specifics of data circulation. Definitions of RBA and RMS in the data economy are proposed, and criteria for their differentiation are identified. Specific proposals for legislative improvement are formulated: supplementing 149-FZ with risk management norms, approving methodological recommendations on RMS, amending 248-FZ regarding assessment of impact on risks of new technologies and evaluation of internal RMS effectiveness. The article is addressed to specialists in information law, public administration and digital economy.