http___www.uredba.com__1.xml
1.1 1.2 2.1 2.2 3.1 3.2 3.3 4.1 5.1 5.2 6.1 6.2 6.3 7.1 7.2 8.1 8.2 9.1 9.2
The General Data Protection Regulation (GDPR) is a legal framework that sets guidelines for organisations on the collection and processing of personal information of individuals within the European Union (EU). In the UK, GDPR is regulated by the Information Commissioner’s Office (ICO). Businesses need to assess their obligations and update their policies, processes and systems to comply with the Regulation. Key requirements of GDPR include transparency, rights of data subjects (prospects, customers, citizens and members) and security. The GDPR requires many organisations to appoint a Data Protection Officer (DPO). The correct implementation of the DPO’s function is vital to a business being able to meet the expectations of the GDPR, so you need to understand the scope and profile of the role. We’ve covered this in-depth in our article ‘Do you really need to recruit a Data Protection Officer (DPO)? GDPR has reset the bar for managing personal data to ensure that businesses become totally accountable for the way they process and protect the personal data of their data subjects. The penalties that the ICO can impose for poor practice can be severe – fines for non-compliance could be as high as 20 million Euros or 4 percent of annual global turnover, whichever is highest. But this will be negligible compared to the potential financial loss of acquiring a bad reputation among customers. Whilst many companies and consultancies are focusing on compliance, business challenges often come with a silver lining. At Ascentor, we always seek to identify the extra benefits. Reviewing your approach to GDPR allows you to take the opportunity to review and optimise existing data processing practices including security controls, retention strategies and third-party agreements. Ascentor can steer you through what is needed to meet your GDPR obligations. We start with our tried and tested Gap Analysis, a four-step process that will arm you with the knowledge to make business decisions regarding improvements and related resources. On completion of an Ascentor Gap Analysis, you will understand where you are today, what needs to be done and an outline plan of how to achieve it. We can then support identified remediation activities and provide ongoing support to maintain your status and continually improve your cyber security posture in accordance with your business objectives. Your cyber security challenges and our pragmatic approach - we could be the perfect fit. Contact Dave James, MD at Ascentor for an informal chat.
1.1 2.1 2.2 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 9.2 9.3 10.1 11.1 12.1 12.2 13.1 14.1 15.1 16.1 17.1
Što je GDPR? GDPR je Opća uredba o zaštiti podataka koja se primjenjuje od 25. svibnja 2018. godine. Zakon o provedbi Uredbe donesen je 27. travnja 2018. godine. Zaštita osobnih podataka jedan je od osnovnih zadataka koje GDPR stavlja pred organizacije bilo da je riječ o osobnim podacima korisnika ili zaposlenika. Organizacije u svakom trenutku moraju znati gdje su osobni podaci pohranjeni, u koju svrhu i do kada se smiju koristiti. Preuzmi uredbu Pojmovi vezani uz Uredbu Zakon o provedbi Opće uredbe o zaštiti podataka NN 42/2018 (805) Više » Službenik za zaštitu osobnih podataka Službenik za zaštitu osobnih podataka (DPO - Data Protection Officer) mora imati holistički pogled na ukupno poslovanje i biti neovisan od voditelja obrade. Glavni zadatak mu je da potpuno neovisno omogući primjenu odredbi Uredbe u organizaciji/društvu/tijelu javne vlasti. Službenik za zaštitu osobnih podataka mora imati znanje eksperta i praktično iskustvo vezano uz zaštitu osobnih podataka te mora dobro razumjeti Uredbu za zaštitu osobnih podataka. Više » Zašto vanjski službenik za zaštitu podataka Opća uredba o zaštiti podataka dopušta da se poslovi službenika za zaštitu podataka (DPO) prepuste vanjskoj kvalificiranoj osobi koja ima potrebna znanja i iskustvo. U slučaju da: - nema potrebe za službenikom za zaštitu podataka na puno radno vrijeme; - zaposlenici nemaju dovoljno vremena za dodatni posao ili su u sukobu interesa; - zaposlenici nemaju potrebne vještine. Kontaktirajte nas putem obrasca Više »