Digital transformation in the legal sector
Challenges and opportunities for cybersecurity and data protection
DOI:
https://doi.org/10.26512/lstr.v17i1.56176Keywords:
Legal mechanisms. Electronic infrastructure. Electronic document management. Software. Socio-economic development.Abstract
[Purpose] The purpose of this study was to examine the principal issues of cybersecurity and data protection in the context of digital transformation in the legal system of the Kyrgyz Republic.
[Methodology/approach/design] The study conducted legal and comparative analysis of the regulatory framework and its application in modern conditions. Additionally, the content of reports from governmental and international organisations was examined to assess current trends in data protection and digital services. The study analysed key documents such as the National Development Strategy of the Kyrgyz Republic for 2018-2040 and the Concept of Digital Transformation of the Kyrgyz Republic for 2024-2028, the Civil and Criminal Codes of the Kyrgyz Republic, as well as laws of the Kyrgyz Republic regulating access to information, data protection, and cybersecurity, namely, “On the Right of Access to Information”, “On Protection of State Secrets of the Kyrgyz Republic”, “On the National Archive Fund of the Kyrgyz Republic”, “On the Electrical Connection”. Special attention was paid to the Tunduk system as an essential element of digital public administration and interaction between public authorities.
[Findings] The key findings showed that despite great strides in digitalisation, the existing legislative framework of the Kyrgyz Republic needs considerable adaptation to ensure data protection and cybersecurity in a rapidly evolving digital environment.
[Practical implications] The study offered recommendations, including the creation of a national cybersecurity centre, the introduction of international data protection standards, and the development of human resources in the field of information security.
[Originality/value] The findings confirm the need to modernise the legal framework to ensure a sustainable and secure digital transformation in the Kyrgyz Republic, which is critical for protecting citizens’ data and increasing trust in public services.
Downloads
References
Ahmed, R.K., Muhammed, K.H., Qadir, A.O., Arif, S.I., Lips, S., Nyman-
Metcalf, K., Pappel, I., Draheim, D. (2021). A legal framework for digital transformation: A proposal based on a comparative case study. In: A. Kö, E. Francesconi, G. Kotsis, A.M. Tjoa & I. Khalil (Eds.), Proceedings of the 10th International Conference “Electronic Government and the Information Systems Perspective” (pp. 115-128). Cham: Springer. https://doi.org/10.1007/978-3-030-86611-2_9
Akcali Gur, B. (2022). Cybersecurity, European digital sovereignty and the 5G
rollout crisis. Computer Law & Security Review, 46, 105736. https://doi.org/10.1016/j.clsr.2022.105736
Al-Daajeh, S. & Alrabaee, S. (2024). Strategic cybersecurity. Computers &
Security, 141, 103845. https://doi.org/10.1016/j.cose.2024.103845
AL-Dosari, K., Fetais, N. & Kucukvar, M. (2023). A shift to green cybersecurity
sustainability development: Using triple bottom-line sustainability assessment in Qatar transportation sector. International Journal of Sustainable Transportation, 17(12), 1287-1301. https://doi.org/10.1016/j.susctrans.2023.103056
Aljaradat, A., Sarkar, G. & Shukla, S.K. (2024). Modelling cybersecurity
impacts on digital payment adoption: A game theoretic approach. Journal of Economic Criminology, 5, 100089. https://doi.org/10.1016/j.jeconc.2024.100089
Balagurchik, D. (2022). “Largest since 2007”. Estonia fends off powerful
cyberattack after dismantling Soviet monument. Available
Begany, G.M. & Gil-Garcia, J.R. (2024). Open government data initiatives as
agents of digital transformation in the public sector: Exploring the extent of use among early adopters. Government Information Quarterly, 41(3), 101955. https://doi.org/10.1016/j.giq.2024.101955
Chiara, P.G. (2024). Towards a right to cybersecurity in EU law? The challenges
ahead. Computer Law & Security Review, 53, 105961. https://doi.org/10.1016/j.clsr.2024.105961
Clemente-Almendros, J.A., Nicoara-Popescu, D. & Pastor-Sanz, I. (2024).
Digital transformation in SMEs: Understanding its determinants and size heterogeneity. Technology in Society, 77, 102483. https://doi.org/10.1016/j.techsoc.2024.102483
Cybil Portal. (2016). Singapore-United States third country training programme
(TCTP) cybersecurity workshops. Available
Cybil Portal. (2019). EU CyberNet. Available
at: https://cybilportal.org/projects/eu-cybernet/
Cybil Portal. (2022). The role of the EU’s cyber ecosystem in the global cyber
security stability. Available at: https://cybilportal.org/projects/the-role-of-the-eus-cyber-ecosystem-in-the-global-cyber-security-stability/
Cybil Portal. (2023). Project for improvement of cyber resilience. Available
at:https://cybilportal.org/projects/project-for-improvement-of-cyber-resilience/
Fischer-Hübner, S., Alcaraz, C., Ferreira, A., Fernandez-Gago, C., Lopez, J.,
Markatos, E., Islami, L. & Akil, M. (2021). Stakeholder perspectives and requirements on cybersecurity in Europe. Journal of Information Security and Applications, 61, 102916. https://doi.org/10.1016/j.jisa.2021.102916
Gómez-Carmona, O., Buján-Carballal, D., Casado-Mansilla, D., López-de-Ipiña,
D., Cano-Benito, J., Cimmino, A., Poveda-Villalón, M., García-Castro, R., Almela-Miralles, J., Apostolidis, D., Drosou, A., Tzovaras, D., Wagner, M., Guadalupe-Rodriguez, M., Salinas, D., Esteller, D., Riera-Rovira, M., González, A., Clavijo-Ágreda, J., Díez-Frias, A., Bocanegra-Yáñez, M. del C., Pedro-Henriques, R., Ferreira-Nunes, E., Lux, M. & Bujalkova, N. (2023). Mind the gap: The AURORAL ecosystem for the digital transformation of smart communities and rural areas. Technology in Society, 74, 102304. https://doi.org/10.1016/j.techsoc.2023.102304
Hoong, Y. & Rezania, D. (2024). Navigating cybersecurity governance: The
influence of opportunity structures in socio-technical transitions for small and medium enterprises. Computers & Security, 142, 103852. https://doi.org/10.1016/j.cose.2024.103852
International Telecommunication Union. (2021). Report “ITU-D study on
potential development trends in the CIS Region directions for the development of the CIS region in the period 2022-2025. Direction ‒ Digital skills”. https://www.itu.int/en/ITU-D/Regional-Presence/CIS/Documents/Track%20-%20Digital%20Skills.pdf
Kun, E. (2024). Challenges in regulating cloud service providers in EU financial
regulation: From operational to systemic risks, and examining challenges of the new oversight regime for critical cloud service providers under the Digital Operational Resilience Act. Computer Law & Security Review, 52, 105931. https://doi.org/10.1016/j.clsr.2023.105931
Kuzior, A., Vasylieva, T., Kuzmenko, O., Koibichuk, V., & Brożek, P. (2022).
Global digital convergence: Impact of cybersecurity, business transparency, economic transformation, and AML efficiency. Journal of Open Innovation: Technology, Market, and Complexity, 8(4), 195. https://doi.org/10.3390/joitmc8040195
Macas, M., Wu, C. & Fuertes, W. (2022). A survey on deep learning for
cybersecurity: Progress, challenges, and opportunities. Computer Networks, 212, 109032. https://doi.org/10.1016/j.comnet.2022.109032
Maglaras, L., Drivas, G., Chouliaras, N., Boiten, E., Lambrinoudakis, C. &
Ioannidis, S. (2020). Cybersecurity in the era of digital transformation: The case of Greece. In: Proceedings of the 2020 International Conference on Internet of Things and Intelligent Applications (pp. 1-5). Piscataway: Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/ITIA50152.2020.9312297
Mijwil, M.M., Filali, Y., Aljanabi, M., Bounabi, M. & Al-Shahwani, H. (2023).
The purpose of cybersecurity governance in the digital transformation of public services and protecting the digital environment. Mesopotamian Journal of Cybersecurity, 2023, 1-6. https://doi.org/10.58496/MJCS/2023/001
Ministry of Digital Development of the Kyrgyz Republic. (2024). Concept
Digital Transformation of the Kyrgyz Republic for 2024-2028. Available
Ministry of Justice of the Republic of Kazakhstan. (2018). Decree of the
President of the Kyrgyz Republic No. 221 “On the National Development Strategy of the Kyrgyz Republic for 2018-2040”. Available
at: https://cbd.minjust.gov.kg/430002/edition/1095562/ru
Ministry of Justice of the Republic of Kazakhstan. (2019). Cybersecurity
Strategy of the Kyrgyz Republic for 2019-2023. Available
at: https://cbd.minjust.gov.kg/15479/edition/962966/ru
Ministry of Justice of the Republic of Kazakhstan. (2023a). Law of the Kyrgyz
Republic No. 210 (15) “On Protection of State Secrets of the Kyrgyz Republic”. Available
at: https://cbd.minjust.gov.kg/111719/edition/1229912/ru
Ministry of Justice of the Republic of Kazakhstan. (2023b). Law of the Kyrgyz
Republic No. 125 “On the National Archive Fund of the Kyrgyz Republic”. Available
at: https://cbd.minjust.gov.kg/4-274/edition/1251127/ru
Ministry of Justice of the Republic of Kazakhstan. (2023c). Law of the Kyrgyz
Republic No.31 “On the Electrical Connection”. Available
at: https://cbd.minjust.gov.kg/42/edition/1286788/ru
Ministry of Justice of the Republic of Kazakhstan. (2024a). Civil Code of the
Kyrgyz Republic No. 15. Available
at: https://cbd.minjust.gov.kg/4/edition/7214/ru
Ministry of Justice of the Republic of Kazakhstan. (2024b). Criminal Code of
the Kyrgyz Republic No. 127. Available
at: https://cbd.minjust.gov.kg/112309/edition/2087/ru
Ministry of Justice of the Republic of Kazakhstan. (2024c). Law of the Kyrgyz
Republic No. 217 “On the Right of Access to Information”. Available
at: https://cbd.minjust.gov.kg/4-5355/edition/11754/ru
Möller, D.P.F. (2023). Cybersecurity in digital transformation. In: Guide to
Cybersecurity in Digital Transformation (pp. 1-70). Cham: Springer. https://doi.org/10.1007/978-3-031-26845-8_1
Nainggolan, B. (2023). Legal dynamics in the digital era: Navigating the Impact
of digital transformation on Indonesian society. Law Development Journal, 5(4), 714-728. Available
at: https://jurnal.unissula.ac.id/index.php/ldj/article/view/36838
National Statistical Committee of the Kyrgyz Republic, Institute of Statistical
Research and Professional Development. (2020). Analytical note: Assessment of
digital transformation in the Kyrgyz Republic. Available
at: https://stat.gov.kg/media/files/2d3ce15c-2581-42cf-b693-8c9dbe33ecdf.pdf
Nguyen, M.Q. (2023). Media presentations of Vietnam’s cybersecurity law: A
comparative approach with corpus-based critical discourse analysis. Computer Law & Security Review, 50, 105835. https://doi.org/10.1016/j.clsr.2023.105835
Popa Tache, C.E. & Săraru, C.S. (2024). Evaluating today’s multi-dependencies
in digital transformation, corporate governance and public international law triad. Cogent Social Sciences, 10(1), 2370945. https://doi.org/10.1080/23311886.2024.2370945
Racionero-Garcia, J. & Shaikh, S.A. (2024). Space and cybersecurity:
Challenges and opportunities emerging from national strategy narratives. Space Policy, 101648. https://dx.doi.org/10.2139/ssrn.4765696
Regional United Nations Group for Europe and Central Asia on Digital
Transformation. (2021). Supporting digital transformation in Europe and Central Asia: Accelerating achievement of sustainable development goals. Available
Reier Forradellas, R.F. & Garay Gallastegui, L.M. (2021). Digital
transformation and artificial intelligence applied to business: Legal regulations, economic impact and perspective. Laws, 10(3), 70. https://doi.org/10.3390/laws10030070
Rodrigues, A.R.D., Ferreira, F.A.F., Teixeira, F.J.C.S.N. & Zopounidis, C.
(2022). Artificial intelligence, digital transformation and cybersecurity in the banking sector: A multi-stakeholder cognition-driven framework. Research in International Business and Finance, 60, 101616. https://doi.org/10.1016/j.ribaf.2022.101616
Saeed, S., Altamimi, S.A., Alkayyal, N.A., Alshehri, E., Alabbad, D.A. (2023).
Digital transformation and cybersecurity challenges for business resilience: Issues and recommendations. Sensors, 23(15), 6666. https://doi.org/10.3390/s23156666
Sarker, I.H., Janicke, H., Ferrag, M.A. & Abuadbba, A. (2024). Multi-aspect
rule-based AI: Methods, taxonomy, challenges and directions towards automation, intelligence and transparent cybersecurity modeling for critical infrastructures. Internet of Things, 25, 101110. https://doi.org/10.1016/j.iot.2024.101110
Syarief, E. (2022). Security concerns in digital transformation of electronic land
registration: Legal protection in cybersecurity laws in Indonesia. International Journal of Cyber Criminology, 16(2), 32-46.
Uwadinma, A.I. & Ikeatu, E.G. (2024). Digital transformation for digital law
practice in Nigeria. Nigerian Journal of Legal Studies, 13, 100-113. Available at:https://www.nigerianjournalsonline.com/index.php/NJLS/article/view/4699
Vostoupal, J., Stupka, V., Harašta, J., Kasl, F., Loutocký, P. & Malinka, K.
(2024). The legal aspects of cybersecurity vulnerability disclosure: To the NIS 2 and beyond. Computer Law & Security Review, 53, 105988. https://doi.org/10.1016/j.clsr.2024.105988
World Bank Group. (2024). Digital progress and trends report 2023. Available
at: https://www.worldbank.org/en/publication/digital-progress-and-trends-report
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 Law, State and Telecommunications Review

This work is licensed under a Creative Commons Attribution 4.0 International License.
By submitting this paper to the Law, State and Telecommunications Review,
I hereby declare that I agree to the terms of the Creative Commons Attribution 4.0 International (CC BY 4.0).
