http___firstaktiv.bg_bg_post_the-eu-general-data-protection-regulation-gdpr_1.xml
https___www.itgovernance.co.uk_blog_eu-gdpr-requires-an-estimated-28000-data-protection-officers-across-europe_.xml
1.1 2.1 3.1 4.1 4.2 4.3 5.1 6.1 7.1
The EU General Data Protection Regulation (GDPR) Считано то 25.05.2018г. влиза в сила Регламент (ЕС) 2016/679 във връзка със защита на физическите лица при обработката на личните им данни и относно свободното движение на такива данни Защитата на физическите лица във връзка с обработването на лични данни е основно право. Създава се фигурата на – „длъжностно лице по защита на данните“, което има консултативна и надзорна функция при администратора на лични данни, включително и да сътрудничи на надзорния орган в Р. България това Комисия за защита на личните данни. Това лице следи спазването на правните норми на Регламента в предприятието (организацията) на администратора на лични данни и обучението на персонала му, който събира, оперира, обработва, съхранява, опазва и унищожава информация, представляваща лични данни. Регламентът регулира дейността на всички администратори на лични данни, както публични органи и структури, така и търговски дружества, които обработват лични данни било то на техните клиенти или на техните служители. В перспектива ще бъде създаден Национален обучителен център за – лицата изпълняващи функцията „длъжностно лице по защита на данните“ с оглед хармонизиране на стандартите и практиката в сферата на защитата на личните данни. Регламентът създава възможност и гаранции на физическите лица да имат достъп до личните си данни при лицето, което ги обработва; право да коригира и допълва предоставените лични данни; право да ограничи обработването на личните му данни; право на преносимост на данните; право на възражение за обработване на личните данни с оглед защита правата и свободите на физическото лице; право на изтриване на лични данни – „право да бъдеш забравен“.
1.1 2.1 2.2 3.1 3.2 3.3 4.1 5.1 5.2 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 15.2 15.3 15.4 16.1 17.1 17.2 17.3 17.4 18.1 19.1 20.1 21.1 21.2 22.1 23.1
The new EU General Data Protection Regulation (GDPR) is set to become effective in May 2018, and will bring with it a huge staffing impact, according to recent studies carried by the International Association of Privacy Professionals (IAPP). One of the Regulation’s requirements, which has not been seen previously in most European law (Germany is the notable exception), relates to staffing. Public authorities and organisations handling and processing high volumes of personal data will now have to hire, appoint or contract a data protection officer (DPO). A recent study by the IAPP indicates that, under the new GDPR, Europe will need at least 28,000 DPOs. The number of DPOs is estimated based on official statistics about public and private sector data controllers within the European Union. As a result, European and overseas organisations handling European residents’ data will create a huge demand for DPOs in response to the requirements of the new Regulation. The DPO role The GDPR requires a DPO to be appointed on the basis of professional qualifications and qualities, in particular “expert knowledge of data protection law and practices”. An organisation’s DPO may be either an employee or a third party who provides data protection officer services, depending on certain criteria. The responsibilities of the DPO lie in ensuring, in an independent manner, that personal data is handled and processed in line with the EU GDPR’s requirements. Article 37 of the Regulation lists the following tasks as part of a DPO’s role: - Monitor and ensure compliance with the Regulation. - Inform and advise the controller or processer and the company’s employees of their obligations to comply with the GDPR. - Conduct internal audits, manage internal data protection activities and provide training to data processing staff. - Advise senior management teams with regard to data protection impact assessments. - Serve as the contact point for issues related to processing personal data. - Respond to enquiries from data subjects on issues relating to consent, the ‘right to be forgotten’, data protection practices and other related data subjects’ rights. DPO’s rights under the GDPR In addition to their responsibilities, DPOs are granted various rights and benefits under the GDPR. Organisations will be required to ensure that the DPOs have access to company resources and receive the necessary ongoing training to fulfil their job responsibilities. DPOs will have independence in performing their roles, reporting directly “to the highest management level” of the company. On the other side, DPOs will have certain statutory obligations, including being bound by secrecy or confidentiality. GDPR training opportunities for DPOs There are two years before the EU General Data Protection Regulation will come into force – time in which organisations will need to upskill or train DPOs. To help organisations train their staff and achieve compliance with the GDPR, IT Governance has launched its brand new Certified EU General Data Protection Regulation Practitioner Training Course. The course is a four-day preparation for individuals looking to solidify their knowledge of the EU GDPR. This course is particularly designed to enable delegates to fulfil the role of data protection officer (DPO). Delegates attending will walk away with in-depth knowledge of data mapping, data privacy impact assessments, GDPR privacy principles, consent rules, subject access requests, risk management framework, data breach reporting requirements and much more. The course is also suitable for managers already involved in data protection with either an information security or data protection background, and privacy professionals who wish to develop their knowledge of data protection with a professional qualification. Book a place on the Certified EU General Data Protection Regulation Practitioner Training Course Delegates with little or no knowledge of the EU General Data Protection regulation are advised to attend the Certified EU General Data Protection Foundation training course to help build a basic understanding of the new Regulation. By booking places on both courses, delegates save 15% on the total price. Take advantage of an exclusive 15% off the Certified EU GDPR Foundation and Practitioner training combined course. Share now…