Insufficient personal data protection
Download
1 / 17

Insufficient personal data protection - PowerPoint PPT Presentation


  • 60 Views
  • Uploaded on

Insufficient personal data protection. Personal Data protection Act.

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about ' Insufficient personal data protection' - zenia


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
Insufficient personal data protection

Insufficient personal data protection

Personal Data protection Act


The personal data security

§ 13 The controller shall be obliged to adopt measures preventing unauthorised or accidental access to personal data, their alteration, destruction or loss, unauthorised transmission, other unauthorised processing, as well as other misuse of personal data. This obligation shall remain valid after terminating personal data processing.

The personal data security


Changes

  • - Security zone

  • - Permits necessary to access data

  • - Regular changes of passwords

  • - Avoidance of public discussions of private affairs of third parties

  • - Locking of cupboards where personal data are kept

Changes


Breach of 13

  • Discarded documentation

  • Insufficient shredding of old documentation

  • Insufficient security of personal data after terminating business

  • Release

  • Acting bona fide

  • Incautiousness

  • Failure of an individual

Breachof § 13





Wa i ting room
Waitingroom


Non secure web

  • Internet banking ABC

  • Registration LINE 24

  • Name: Hans Solo

  • Password:******

  • https://www.line24.cz/ebanking-l24/ib/base/login?execution=123456789

Non-secure web


Trade register

Main data

  • Identification number: 6050000

  • firm: Hans Solo

  • Place of business: W. Churchill 1, Praha

  • Legal form: 101 – natural person

  • Date of birth: 25.1.1967

Trade register


13 par 2

The controller or the processor shall be obliged to develop and to document the technical-organisational measures adopted and implemented to ensure the personal data protection in accordance with the law and other legal regulations.

§ 13 par. 2


13 par 3

  • 3) In the framework of measures pursuant to paragraph (1), the controller or the processor perform a risk assessment concerning

  • (a) the carrying out of instructions for personal data processing by persons who have immediate access to the personal data,

  • (b) prevention of unauthorized persons' access to personal data and means for their processing,

  • (c) prevention of unauthorized reading, creating, copying, transferring, modifying or deleting of records containing personal data, and

  • (d) measures enabling to determine and verify to whom the personal data were transferred.

§ 13 Par. 3


13 par 31

  • Checking of computers security – names the controller or the processor perform a risk assessment concerning, Passwords

  • Security of buildings, rooms, cabinets

  • External administration of computer network, Firewall

§ 13 par. 3


13 par 4

  • In the area of automatic processing of personal data, the controller or processor shall, in the framework of measures under paragraph 1, be obliged to

  • (a) ensure that the systems for automatic processing of personal data are used only by authorized persons,

  • (b) ensure that the natural persons authorized to use systems for automatic processing of personal data have access only to the personal data corresponding to their authorization, and this on the basis of specific user authorizations established exclusively for these persons,

  • (c) make electronic records enabling to identify and verify when, by whom and for what reason the personal data were recorded or otherwise processed, and

  • (d) prevent any unauthorized access to data carriers.

§ 13 par. 4


13 par 4 let c

No exceptions controller or processor shall, in the framework of measures under paragraph 1, be obliged to

Logging – make electronic records enabling to identify and verify when, by whom and for what reason the personal data were recorded or otherwise processed

§ 13 par. 4 let. c)


Pseudonymous data

Name controller or processor shall, in the framework of measures under paragraph 1, be obliged toClassSchool TownHandicap

  • Maria 4BHS Hradecka Praha 3

  • Lucie 5AHS Hradecka Praha 4

  • Hata5A G Mostecka Brno 4

  • Kilian4B P Bila Plzen 2

  • Scarlett 1 G JeseniovaHradec 1

  • Kim 2 G JeseniovaHradec 2

Pseudonymous data


Kamila bendova @ uoou cz

Thank for your attention controller or processor shall, in the framework of measures under paragraph 1, be obliged to

[email protected]


ad