In the Russian Federation, a system of national legislation has been created that ensures the implementation of rights and protection of legitimate interests of all citizens of the Russian Federation. Based on federal laws, departmental and regional by-laws have been adopted that allow for effective regulation of relations related to the processing of personal data. The specified regulatory legal acts enshrine the generally recognized rights of citizens to protect personal data from unauthorized access, to be informed about processing and to ensure citizens’ access to processed personal data. By ensuring the confidentiality of citizens’ personal data, the Russian Federation strengthens the legal protection and security of the individual and creates a favorable environment for the comprehensive development of each individual citizen and civil society as a whole. The formation of a regulatory framework for regulating the circulation of confidential information in the Russian Federation is directly related to medical activities. Federal and departmental regulations adopted in recent years quite clearly regulate the actions of medical workers who process patients’ personal data in the course of performing their professional duties in providing medical care to the population. Observance of the rights of citizens to personal inviolability and privacy is one of the priority tasks, the solution of which largely depends on each employee of a medical organization, regardless of the legal status of the medical organization, as well as the specialty and qualifications of individual employees.