Digital transformation in the legal sector

Challenges and opportunities for cybersecurity and data protection

Authors

DOI:

https://doi.org/10.26512/lstr.v17i1.56176

Keywords:

Legal mechanisms. Electronic infrastructure. Electronic document management. Software. Socio-economic development.

Abstract

[Purpose] The purpose of this study was to examine the principal issues of cybersecurity and data protection in the context of digital transformation in the legal system of the Kyrgyz Republic.

[Methodology/approach/design] The study conducted legal and comparative analysis of the regulatory framework and its application in modern conditions. Additionally, the content of reports from governmental and international organisations was examined to assess current trends in data protection and digital services. The study analysed key documents such as the National Development Strategy of the Kyrgyz Republic for 2018-2040 and the Concept of Digital Transformation of the Kyrgyz Republic for 2024-2028, the Civil and Criminal Codes of the Kyrgyz Republic, as well as laws of the Kyrgyz Republic regulating access to information, data protection, and cybersecurity, namely, “On the Right of Access to Information”, “On Protection of State Secrets of the Kyrgyz Republic”, “On the National Archive Fund of the Kyrgyz Republic”, “On the Electrical Connection”. Special attention was paid to the Tunduk system as an essential element of digital public administration and interaction between public authorities.

[Findings] The key findings showed that despite great strides in digitalisation, the existing legislative framework of the Kyrgyz Republic needs considerable adaptation to ensure data protection and cybersecurity in a rapidly evolving digital environment.

[Practical implications] The study offered recommendations, including the creation of a national cybersecurity centre, the introduction of international data protection standards, and the development of human resources in the field of information security.

[Originality/value] The findings confirm the need to modernise the legal framework to ensure a sustainable and secure digital transformation in the Kyrgyz Republic, which is critical for protecting citizens’ data and increasing trust in public services.

Downloads

Download data is not yet available.

Author Biographies

Erisa Xhixho, University of Tirana

Department of Public Law, University of Tirana, 1010, 4 Mother Teresa Sq., Tirana, Albania. E-mail: erisaxhixho18@gmail.com.

Niiazbek Pazylov, Osh State University

Department of Civil Law and Procedure, Osh State University, 723500, 331 Lenin Str., Osh, Kyrgyz Republic. E-mail: n_pazylov@outlook.com.

Viktor Savchenko, Kauno Kolegija Higher Education Institution

Faculty of Business, Kauno Kolegija Higher Education Institution, 50468, 20 Pramones Ave., Kaunas, Lithuania. E-mail: viktor_savchenko@hotmail.com.

Nurkhanbek Patiev, Osh State University

Department of Theories, History of State and Law, Osh State University, 723500, 331 Lenin Str., Osh, Kyrgyz Republic. E-mail: nurk-patiev@outlook.com.

Munarym Pazylova, Osh State University

Department of Civil Law and Procedure, Osh State University, 723500, 331 Lenin Str., Osh, Kyrgyz Republic. E-mail: mu_pazylova@hotmail.com.

References

Ahmed, R.K., Muhammed, K.H., Qadir, A.O., Arif, S.I., Lips, S., Nyman-

Metcalf, K., Pappel, I., Draheim, D. (2021). A legal framework for digital transformation: A proposal based on a comparative case study. In: A. Kö, E. Francesconi, G. Kotsis, A.M. Tjoa & I. Khalil (Eds.), Proceedings of the 10th International Conference “Electronic Government and the Information Systems Perspective” (pp. 115-128). Cham: Springer. https://doi.org/10.1007/978-3-030-86611-2_9

Akcali Gur, B. (2022). Cybersecurity, European digital sovereignty and the 5G

rollout crisis. Computer Law & Security Review, 46, 105736. https://doi.org/10.1016/j.clsr.2022.105736

Al-Daajeh, S. & Alrabaee, S. (2024). Strategic cybersecurity. Computers &

Security, 141, 103845. https://doi.org/10.1016/j.cose.2024.103845

AL-Dosari, K., Fetais, N. & Kucukvar, M. (2023). A shift to green cybersecurity

sustainability development: Using triple bottom-line sustainability assessment in Qatar transportation sector. International Journal of Sustainable Transportation, 17(12), 1287-1301. https://doi.org/10.1016/j.susctrans.2023.103056

Aljaradat, A., Sarkar, G. & Shukla, S.K. (2024). Modelling cybersecurity

impacts on digital payment adoption: A game theoretic approach. Journal of Economic Criminology, 5, 100089. https://doi.org/10.1016/j.jeconc.2024.100089

Balagurchik, D. (2022). “Largest since 2007”. Estonia fends off powerful

cyberattack after dismantling Soviet monument. Available

at: https://nv.ua/amp/estoniya-otrazila-samuyu-masshtabnuyu-kiberataku-s-2007-goda-posle-demontazha-sovetskogo-pamyatnika-50264055.html

Begany, G.M. & Gil-Garcia, J.R. (2024). Open government data initiatives as

agents of digital transformation in the public sector: Exploring the extent of use among early adopters. Government Information Quarterly, 41(3), 101955. https://doi.org/10.1016/j.giq.2024.101955

Chiara, P.G. (2024). Towards a right to cybersecurity in EU law? The challenges

ahead. Computer Law & Security Review, 53, 105961. https://doi.org/10.1016/j.clsr.2024.105961

Clemente-Almendros, J.A., Nicoara-Popescu, D. & Pastor-Sanz, I. (2024).

Digital transformation in SMEs: Understanding its determinants and size heterogeneity. Technology in Society, 77, 102483. https://doi.org/10.1016/j.techsoc.2024.102483

Cybil Portal. (2016). Singapore-United States third country training programme

(TCTP) cybersecurity workshops. Available

at: https://cybilportal.org/projects/singapore-united-states-third-country-training-programme-tctp-cybersecurity-workshops/

Cybil Portal. (2019). EU CyberNet. Available

at: https://cybilportal.org/projects/eu-cybernet/

Cybil Portal. (2022). The role of the EU’s cyber ecosystem in the global cyber

security stability. Available at: https://cybilportal.org/projects/the-role-of-the-eus-cyber-ecosystem-in-the-global-cyber-security-stability/

Cybil Portal. (2023). Project for improvement of cyber resilience. Available

at:https://cybilportal.org/projects/project-for-improvement-of-cyber-resilience/

Fischer-Hübner, S., Alcaraz, C., Ferreira, A., Fernandez-Gago, C., Lopez, J.,

Markatos, E., Islami, L. & Akil, M. (2021). Stakeholder perspectives and requirements on cybersecurity in Europe. Journal of Information Security and Applications, 61, 102916. https://doi.org/10.1016/j.jisa.2021.102916

Gómez-Carmona, O., Buján-Carballal, D., Casado-Mansilla, D., López-de-Ipiña,

D., Cano-Benito, J., Cimmino, A., Poveda-Villalón, M., García-Castro, R., Almela-Miralles, J., Apostolidis, D., Drosou, A., Tzovaras, D., Wagner, M., Guadalupe-Rodriguez, M., Salinas, D., Esteller, D., Riera-Rovira, M., González, A., Clavijo-Ágreda, J., Díez-Frias, A., Bocanegra-Yáñez, M. del C., Pedro-Henriques, R., Ferreira-Nunes, E., Lux, M. & Bujalkova, N. (2023). Mind the gap: The AURORAL ecosystem for the digital transformation of smart communities and rural areas. Technology in Society, 74, 102304. https://doi.org/10.1016/j.techsoc.2023.102304

Hoong, Y. & Rezania, D. (2024). Navigating cybersecurity governance: The

influence of opportunity structures in socio-technical transitions for small and medium enterprises. Computers & Security, 142, 103852. https://doi.org/10.1016/j.cose.2024.103852

International Telecommunication Union. (2021). Report “ITU-D study on

potential development trends in the CIS Region directions for the development of the CIS region in the period 2022-2025. Direction ‒ Digital skills”. https://www.itu.int/en/ITU-D/Regional-Presence/CIS/Documents/Track%20-%20Digital%20Skills.pdf

Kun, E. (2024). Challenges in regulating cloud service providers in EU financial

regulation: From operational to systemic risks, and examining challenges of the new oversight regime for critical cloud service providers under the Digital Operational Resilience Act. Computer Law & Security Review, 52, 105931. https://doi.org/10.1016/j.clsr.2023.105931

Kuzior, A., Vasylieva, T., Kuzmenko, O., Koibichuk, V., & Brożek, P. (2022).

Global digital convergence: Impact of cybersecurity, business transparency, economic transformation, and AML efficiency. Journal of Open Innovation: Technology, Market, and Complexity, 8(4), 195. https://doi.org/10.3390/joitmc8040195

Macas, M., Wu, C. & Fuertes, W. (2022). A survey on deep learning for

cybersecurity: Progress, challenges, and opportunities. Computer Networks, 212, 109032. https://doi.org/10.1016/j.comnet.2022.109032

Maglaras, L., Drivas, G., Chouliaras, N., Boiten, E., Lambrinoudakis, C. &

Ioannidis, S. (2020). Cybersecurity in the era of digital transformation: The case of Greece. In: Proceedings of the 2020 International Conference on Internet of Things and Intelligent Applications (pp. 1-5). Piscataway: Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/ITIA50152.2020.9312297

Mijwil, M.M., Filali, Y., Aljanabi, M., Bounabi, M. & Al-Shahwani, H. (2023).

The purpose of cybersecurity governance in the digital transformation of public services and protecting the digital environment. Mesopotamian Journal of Cybersecurity, 2023, 1-6. https://doi.org/10.58496/MJCS/2023/001

Ministry of Digital Development of the Kyrgyz Republic. (2024). Concept

Digital Transformation of the Kyrgyz Republic for 2024-2028. Available

at: https://digital.gov.kg/en/activities/konczkpcziya-czifrovoj-transformaczii-kyrgyzskoj-respubliki-na-2024-2028-gody/

Ministry of Justice of the Republic of Kazakhstan. (2018). Decree of the

President of the Kyrgyz Republic No. 221 “On the National Development Strategy of the Kyrgyz Republic for 2018-2040”. Available

at: https://cbd.minjust.gov.kg/430002/edition/1095562/ru

Ministry of Justice of the Republic of Kazakhstan. (2019). Cybersecurity

Strategy of the Kyrgyz Republic for 2019-2023. Available

at: https://cbd.minjust.gov.kg/15479/edition/962966/ru

Ministry of Justice of the Republic of Kazakhstan. (2023a). Law of the Kyrgyz

Republic No. 210 (15) “On Protection of State Secrets of the Kyrgyz Republic”. Available

at: https://cbd.minjust.gov.kg/111719/edition/1229912/ru

Ministry of Justice of the Republic of Kazakhstan. (2023b). Law of the Kyrgyz

Republic No. 125 “On the National Archive Fund of the Kyrgyz Republic”. Available

at: https://cbd.minjust.gov.kg/4-274/edition/1251127/ru

Ministry of Justice of the Republic of Kazakhstan. (2023c). Law of the Kyrgyz

Republic No.31 “On the Electrical Connection”. Available

at: https://cbd.minjust.gov.kg/42/edition/1286788/ru

Ministry of Justice of the Republic of Kazakhstan. (2024a). Civil Code of the

Kyrgyz Republic No. 15. Available

at: https://cbd.minjust.gov.kg/4/edition/7214/ru

Ministry of Justice of the Republic of Kazakhstan. (2024b). Criminal Code of

the Kyrgyz Republic No. 127. Available

at: https://cbd.minjust.gov.kg/112309/edition/2087/ru

Ministry of Justice of the Republic of Kazakhstan. (2024c). Law of the Kyrgyz

Republic No. 217 “On the Right of Access to Information”. Available

at: https://cbd.minjust.gov.kg/4-5355/edition/11754/ru

Möller, D.P.F. (2023). Cybersecurity in digital transformation. In: Guide to

Cybersecurity in Digital Transformation (pp. 1-70). Cham: Springer. https://doi.org/10.1007/978-3-031-26845-8_1

Nainggolan, B. (2023). Legal dynamics in the digital era: Navigating the Impact

of digital transformation on Indonesian society. Law Development Journal, 5(4), 714-728. Available

at: https://jurnal.unissula.ac.id/index.php/ldj/article/view/36838

National Statistical Committee of the Kyrgyz Republic, Institute of Statistical

Research and Professional Development. (2020). Analytical note: Assessment of

digital transformation in the Kyrgyz Republic. Available

at: https://stat.gov.kg/media/files/2d3ce15c-2581-42cf-b693-8c9dbe33ecdf.pdf

Nguyen, M.Q. (2023). Media presentations of Vietnam’s cybersecurity law: A

comparative approach with corpus-based critical discourse analysis. Computer Law & Security Review, 50, 105835. https://doi.org/10.1016/j.clsr.2023.105835

Popa Tache, C.E. & Săraru, C.S. (2024). Evaluating today’s multi-dependencies

in digital transformation, corporate governance and public international law triad. Cogent Social Sciences, 10(1), 2370945. https://doi.org/10.1080/23311886.2024.2370945

Racionero-Garcia, J. & Shaikh, S.A. (2024). Space and cybersecurity:

Challenges and opportunities emerging from national strategy narratives. Space Policy, 101648. https://dx.doi.org/10.2139/ssrn.4765696

Regional United Nations Group for Europe and Central Asia on Digital

Transformation. (2021). Supporting digital transformation in Europe and Central Asia: Accelerating achievement of sustainable development goals. Available

at:https://www.itu.int/en/ITU-D/Regional-Presence/Europe/Documents/Events/2021/Cross%20cutting%20session%20on%20digitalization/Stocktaking%20ICTs%20solutions_10_Mar_FINAL%20(1).pdf

Reier Forradellas, R.F. & Garay Gallastegui, L.M. (2021). Digital

transformation and artificial intelligence applied to business: Legal regulations, economic impact and perspective. Laws, 10(3), 70. https://doi.org/10.3390/laws10030070

Rodrigues, A.R.D., Ferreira, F.A.F., Teixeira, F.J.C.S.N. & Zopounidis, C.

(2022). Artificial intelligence, digital transformation and cybersecurity in the banking sector: A multi-stakeholder cognition-driven framework. Research in International Business and Finance, 60, 101616. https://doi.org/10.1016/j.ribaf.2022.101616

Saeed, S., Altamimi, S.A., Alkayyal, N.A., Alshehri, E., Alabbad, D.A. (2023).

Digital transformation and cybersecurity challenges for business resilience: Issues and recommendations. Sensors, 23(15), 6666. https://doi.org/10.3390/s23156666

Sarker, I.H., Janicke, H., Ferrag, M.A. & Abuadbba, A. (2024). Multi-aspect

rule-based AI: Methods, taxonomy, challenges and directions towards automation, intelligence and transparent cybersecurity modeling for critical infrastructures. Internet of Things, 25, 101110. https://doi.org/10.1016/j.iot.2024.101110

Syarief, E. (2022). Security concerns in digital transformation of electronic land

registration: Legal protection in cybersecurity laws in Indonesia. International Journal of Cyber Criminology, 16(2), 32-46.

Uwadinma, A.I. & Ikeatu, E.G. (2024). Digital transformation for digital law

practice in Nigeria. Nigerian Journal of Legal Studies, 13, 100-113. Available at:https://www.nigerianjournalsonline.com/index.php/NJLS/article/view/4699

Vostoupal, J., Stupka, V., Harašta, J., Kasl, F., Loutocký, P. & Malinka, K.

(2024). The legal aspects of cybersecurity vulnerability disclosure: To the NIS 2 and beyond. Computer Law & Security Review, 53, 105988. https://doi.org/10.1016/j.clsr.2024.105988

World Bank Group. (2024). Digital progress and trends report 2023. Available

at: https://www.worldbank.org/en/publication/digital-progress-and-trends-report

Downloads

Published

2025-05-02

How to Cite

XHIXHO, Erisa; PAZYLOV, Niiazbek; SAVCHENKO, Viktor; PATIEV, Nurkhanbek; PAZYLOVA, Munarym. Digital transformation in the legal sector: Challenges and opportunities for cybersecurity and data protection. Law, State and Telecommunications Review, [S. l.], v. 17, n. 1, p. 250–271, 2025. DOI: 10.26512/lstr.v17i1.56176. Disponível em: https://periodicos.unb.br/index.php/RDET/article/view/56176. Acesso em: 27 dec. 2025.