Protection of personal data for its importance is arranged in many international and national legal documents. According to advanced technology and the way of communication that characterize modern age, flow of information is very fast. Accordingly, spread of information is hard to control and establish efficient data protection. Requirement appeared to produce act which will protect personal data on higher level, relatively so it can be more efficient. In that the biggest role had General Data Protection Regulation (GDPR). Concept of personal data spread, main principles were determined for protection of personal data, sanctions were impose for its violation, rights of the data subject and law concept for analysis of personal data were set, etc. Besides mentioned, it is prescribed that every state has to establish an independent supervisory authority whose will monitor implementation of General Data Protection Regulation, relatively respecting its prescription. This department has many supervisory, advisory, corrective and investigative powers. Of the major prescriptions have to mentioned those that prescribe legal concept analysis of personal data, relatively which conditions have to be fulfilled that analysis of personal data is legal, and that is very important for controller and processor analysis. At law basis it is important to cognition basic characteristics of approval. Especially are important rights of the data subject because through them individual knows what can be done with his personal data and what can´t be done. Also, process is important, relatively law assets which desist respondent at disposal in case of damage of personal data. Aim of this work is to carry basic terms connected to personal data, lawfulness of processing and process about legal protection of personal data in purpose to amplified controls using and analysis of personal data.