Are there any restrictions due to working with personal data?

Yes, working with personal data involves serious restrictions related to legislation and ethical norms. For example, in Europe, GDPR applies, and in Russia, there is the Federal Law on Personal Data (FZ-152).

Main restrictions and requirements:

• Data collection and storage: it is necessary to obtain user consent for data processing and store data securely.
• Data minimization: collect only the data that is truly necessary for the task.
• Anonymization and pseudonymization: whenever possible, data should be anonymized to reduce leakage risks.
• Access restriction: access to personal data must be strictly controlled.
• Right to delete and correct: users should be able to request deletion or correction of their data.

In the context of machine learning, this means data must be prepared and processed with these requirements in mind, and models should not disclose personal information (e.g., through data reconstruction attacks).