In today's world, preventing security breaches of information exchange networks requires mechanisms to maintain the integrity and security of network implementation. Among the components of the network, individuals are the subject of data and data messages to be exchanged. In this process, managers of information exchange networks and processors of data messages, which are called controllers and processors, have duties. What will the present research look for in answering the duties of the mentioned persons in the field of preventing security violations of information exchange networks. In this way, the present research, by studying the regulations governing the legal system of the European Union and the application of these regulations in the laws of Iran, has determined the duties of these persons in carrying out appropriate measures in the correct and legal implementation of information processing, the duties of notifying the subject persons through a documentary method. His consent to processing, announcing the reasons for rejecting his request, removing restrictions on processing, protective measures in the transnational exchange of information, the rights of the data subject, measures taken in the process of information processing, the existence of risk in processing), other controllers and processors (in announcing the deletion or creating restrictions on processing) and supervisory authorities (in cooperation and notification) has done.