General issues of personal data processing in the organization, the regulatory framework in the field of personal data processing and protection of the Russian Federation were considered, requirements for personal data protection were formed, a method for personal data protection was proposed. In addition, the structure and the possibility of using a specialized automated system for assessing the organization for compliance with the requirements for the protection of personal data are considered.