Abstract Digital transformation has led to an increase in the circulation and electronic storage of personal data, contributing to the emergence of new risks such as hacking, information leaks, and cyber extortion. Criminal protection is therefore of significant importance in addressing these attacks and safeguarding individuals’ privacy and rights. Keywords: Criminal protection, personal data, digital transformation, cybercrime. Introduction Personal data has become an important element of modern digital life, as government and private institutions rely on collecting and processing such data to provide various services. However, its misuse or unauthorized access may result in violations of privacy and harm to individuals, necessitating effective legal protection. Research Problem The research problem lies in determining the extent to which criminal legislation is sufficient to address attacks against personal data in light of rapid technological development. Significance of the Research The significance of this research stems from the need to protect individuals’ privacy, reduce cybercrime, and enhance trust in digital transactions. Research Methodology The research adopts an analytical approach to examine the legal rules related to the protection of personal data, with reference to Iraqi legislation and certain international standards. Research Topic Attacks against personal data take various forms, including cyber hacking, information leaks, identity theft, and blackmail involving private data. Criminal liability varies depending on the nature of the act and the fulfillment of the elements of the crime prescribed by law. In Iraq, the right to personal privacy, recognized under Article 17(First) of the Constitution of the Republic of Iraq of 2005, constitutes an important foundation for protection. Certain existing laws also address the protection of information and electronic transactions. Nevertheless, there is a need to develop an integrated legislative framework regulating the collection, processing, and circulation of personal data, while defining the forms of attacks against such data and the penalties applicable to them. Addressing these crimes requires strengthening cybersecurity, developing methods for investigating digital evidence, and raising individuals’ awareness of the risks associated with sharing their personal information, in addition to promoting cooperation among the competent authorities. Findings and Recommendations The research concludes that digital development has increased the risks of attacks against personal data and that effective protection requires the integration of legal provisions with technical and institutional measures. The research recommends developing Iraqi legislation concerning the protection of personal data, precisely defining criminalized acts, strengthening digital investigation capabilities, and promoting legal and technical awareness among members of society. Conclusion Criminal protection of personal data is an essential necessity in the digital age because of its role in safeguarding privacy and individual rights. Achieving such protection requires updating legislation, strengthening cybersecurity, and maintaining a balance between technological development and respect for human rights. Sources and References 1. Constitution of the Republic of Iraq of 2005, Article 17(First). 2. Iraqi Penal Code No. 111 of 1969. 3. Iraqi Electronic Signature and Electronic Transactions Law No. 78 of 2012. 4. General Data Protection Regulation of the European Union (GDPR), 2016. 5. Council of Europe Convention for the Protection of Personal Data, 1981.