What are the benefits of cloud based storage systems?
- Information is back up securely
- Accessibility can be managed
- Often cheaper
- Convenient to send and share files
- More environmentally friendly
- Multiple users can access the same document
What is the meaning of a non disclosure agreement?
- Used to protect against disclosure or sharing of any confidential data
- Often used with confidential, sensitive info is being shared to prevent info being used by competitors
If two separate departments within your firm were working for two rival companies how would you ensure that client sensitive data was managed?
- Make client aware of the risks and how this is to be managed
- Conflict of interest
- Letter of instruction to continue
- NDA’s
- single communication lines to the client
- Separate working locations
- Secure storage
Who are the key persons outlined within GDPR?
Controller = Person or legal entity that determines the purposes and means of the processing of data
Processor = Person or legal entity that processes personal data on behalf of the controller
Data protection officer = Leadership role required by EU GDPR. This role exists within companies that process the persona data of EU Citizens.. Responsible for overseeing the approach, strategy and implementation
What are the 8 individual rights under GDPR?
- The right to be informed
- The right of access
- The right of rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Right of automated decision making and profiling
What things must companies put in place to ensure GDPR Compliance?
- Raise awareness across your business
- Audit all personal data
- Update privacy notice
- Review your procedures
- Identify and document your legal basis under the GDPR
- Review how you seek, obtain and record content
What are the principles of GDPR?
- Be transparent with data
- only hold data you need
- Don’t hold data for longer than needed
- Only hold personal information for as long as needed
- Take responsibility (have systems in place)
- Keep it confidential
- Keep the data accurate
What is GDPR?
General data protection regulations
Law on data protection and privacy, outline certain principles
