http___www.uredba.com_news_1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 8.2 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1
Cyber Resilience This Data Protection Day get your organisation GDPR ready January 25, 2018 by bpcyber No Comments With just four months to go till General Data Protection Regulation (GDPR) comes into force on 25 May 2018, this Data Protection Day (28 January) take time out to ensure you know exactly how this might affect your organisation. The increasing use – and abuse – of personal and sensitive information has driven forward this reform of data protection law in Europe, shifting the balance of power towards the citizen to whom the personal data belongs and away from organisations that collect, analyse and use such data. Building on the existing Data Protection Act the new General Data Protection Regulation (GDPR) will come into effect on 25 May 2018 and will continue to apply to UK after Brexit negotiations take place in order to allow businesses to work across the EU. Every business and organisation that handles and uses personal information will need to consider what action they should take to protecting that vital data under GDPR. This evolution in data protection has been developed to bring benefits to people, businesses and organisations. The measures set out in the GDPR will: • strengthen citizens’ rights and help them to have trust and confidence in the services they use • combat international crime and support better cross-border cooperation of law enforcement, • remove obstacles to cross-border trade, enabling easier expansion of businesses across Europe. The key changes include: • People will have increased rights of access to, portability and deletion of their personal data. • Organisations must be accountable for what, why and how they process information. • Fines for breaches may increase to €10-20 million or 2%-4% of turnover, whichever is largest (currently the ICO’s maximum fine is £500k). • It will become mandatory to report significant breaches to the Information Commissioner within 72 hours of becoming aware of it, if it’s likely to result in a risk to people’s rights and freedoms. • Public sector organisations – and other organisations that monitor individuals systematically and on a large scale, or that process special categories of personal data on a large scale – must appoint a Data Protection Officer who reports directly to the highest level of management. What can your organisation do to be prepared for GDPR? Getting ready to comply with the GDPR can start with making sure the basics are in place using ICO’s 12 steps: https://ico.org.uk/media/1624219/preparing-for-the-gdpr-12-steps.pdf They will be developing guidance over the coming months so keep an eye on their website for more information. Your organisation might also consider the Cyber Essentials scheme and the 10 Steps to Cyber Security, both developed by Government to ensure any organisation can protect themselves from common cyber-attacks. Tags: communications, news, Small Business, SME
2.1 3.1 5.1 7.1 7.2 8.1 9.1 9.2 9.3
U narodnim novinama NN 42/2018 (805), 9. svibnja 2018. godine objavljen je Zakon o provedbi Opće uredbe o zaštiti podataka https://narodne-novine.nn.hr/clanci/sluzbeni/2018_05_42_805.html Hrvatski Sabor je na svojoj sjednici održanoj 27. travnja 2018. godine prihvatio Zakon o provedbi Opće uredbe o zaštiti osobnih podataka. Europska unija donijela je prošle godine novi regulatorni okvir za zaštitu privatnosti naziva Opća uredba o zaštiti podataka (General Data Protection Regulation, kraće GDPR). Uredba će stupiti na snagu 25. svibnja 2018. i za razliku od direktive iz 1995. bit će direktno primjenjiva u državama članicama bez potrebe za implementacijom u nacionalno zakonodavstvo. Opća uredba o zaštiti osobnih podataka Općom uredbom o zaštiti podataka (GDPR) određeni voditelji obrade i izvršitelji obrade dužni su imenovati službenika za zaštitu podataka (DPO). To vrijedi za sva tijela javne vlasti i javna tijela (bez obzira na to koje podatke obrađuju) i za ostale organizacije čija je osnovna djelatnost sustavno i opsežno praćenje pojedinaca ili koje obrađuju posebne kategorije osobnih podataka u velikoj mjeri. Čak i kad se Općom uredbom o zaštiti podataka izričito ne zahtijeva imenovanje službenika za zaštitu podataka, za organizacije može biti korisno dobrovoljno imenovanje službenika za zaštitu podataka.