http___www.uredba.com_news_1.xml
1.1 1.2 2.1 2.2 2.3 3.1 3.2 3.3 4.1 4.2 5.1 6.1 6.2 7.1 8.1 9.1 9.2 10.1 10.2 11.1 11.2 12.1 12.2 12.3 13.1 13.2 14.1 14.2 14.3 14.4 15.1 15.2 16.1 16.2 16.3 17.1 18.1 19.1 20.1 20.2 21.1 21.2 21.3 22.1 23.1 24.1 25.1 25.2 26.1 26.2 27.1 27.2 28.1 28.2 28.3 28.4 29.1 29.2 30.1 30.2 30.3
Over the past few months, Ascentor has published a series of articles tackling the issues on the typical GDPR to-do list. Our blog post looking at the Data Protection Officer (DPO) proved to be one of our highest read ever, so we’ve decided to look at one of the DPO’s responsibilities – ensuring that the data processor used by the organisation complies with data protection law. Getting this right will play a big part in avoiding the risks that organisations face when processing personal data. But what goes into considering whether the contractual obligations in place between yourselves and your data processors provide adequate protection to comply with data protection law? Continue reading “Choosing and managing data processors to comply with GDPR” » The Chinese have just celebrated the start of The Year of the Dog. But for anyone with responsibility for data security in their organisation, it’s very much ‘The Year of Regulation’. You’ll have heard plenty about the General Data Protection Regulation (GDPR), but what about the European Union’s other piece of security legislation, the Network and Information Security (NIS) Directive? May is going to be a busy month in cyber security, with the NIS Directive being transposed into national law on 9th May, quickly followed by the GDPR on 25th May – as if you needed reminding. Continue reading “The NIS Directive explained – compliance and guidance” » The EU General Data Protection Regulation (GDPR) brings with it new requirements for the capture and use of consent to process personal data, along with new puzzles and misconceptions about the requirement for its use for data controllers. Whilst we await publication of new guidance from the Information Commissioner’s Office on consent, we’re taking a look at the options around consent and the legality of processing data. Continue reading “GDPR: What does the Regulation require when capturing consent?” It’s always the big cyber security attacks that steal the headlines, but dig a little deeper and there are everyday stories of hacker inflicted misery – many of which could have been prevented. So, if you are increasingly concerned about the threat to your own data and are looking for advice, this guide is for you. It’s part one of a two-part series reviewing the ‘best of’ the many respected sources of cyber security advice available, with some of our most popular articles included. Continue reading “The one-stop guide to cyber security advice (Part 1)” » By now you’ll have heard that there’s huge change coming to European data protection law. The EU General Data Protection Regulation (GDPR) comes into force on 25th May 2018, replacing the Data Protection Act 1998 (DPA). So, you’ve started doing your research as you prepare for GDPR – and you’ve noticed that the requirement to appoint a Data Protection Officer (DPO) is a feature of many articles. The DPO will play a key role in ensuring compliance with GDPR – but it’s not immediately obvious what is involved. That’s why this article looks at what the role entails, the skill sets required and cuts through some of the confusion we’ve noticed. For example, what exactly is a DPO and does every organisation actually need to appoint one? Continue reading “GDPR: Do you really need a Data Protection Officer (DPO)?” There is a recurring message in many of the surveys about cyber security. It’s broadly this: a high number of businesses say that cyber security is an important issue – but a low number report any evidence of actually doing something about it. The latest Cyber Security Breach Survey 2017 illustrates this perfectly. IPSOS MORI interviewed 1,523 UK businesses. In 74% of cases the directors or senior management said that cyber security is a high priority but only 20% currently provide staff with cyber security training – and only 33% have any formal policies in place. Continue reading “Convince your board – cyber attack prevention is better than cure” » In our previous blog we discussed the four key areas of the General Data Protection Regulation (GDPR) and asked ‘What does it really mean for your organisation?’ With a looming launch date of 25th May 2018, our closing advice was “don’t leave it to the last minute or chance.” Although GDPR is a huge data management undertaking, compliance needn’t be an insurmountable challenge. So, in this article we’ve summarised the steps an organisation needs to consider to ensure it does comply. Continue reading “Ten steps to GDPR compliance” » Director and Government Service Manager at Ascentor More Posts Follow Me: 25th May 2018 sees the indoctrination of the General Data Protection Regulation (GDPR) courtesy of the European Union. While eagerly anticipated by some organisations, for many the daunting reality of the changes GDPR brings is rapidly setting in. There might have been a brief period of post Brexit vote uncertainty about GDPR – but it will go ahead as planned. In the world of data management, it’s time to smell the coffee. Continue reading “GDPR: What does it really mean for your organisation?” Director and Government Service Manager at Ascentor More Posts Follow Me: As we reflect on 2016, there are two stand out events that dwarf every other piece of news this year – the decision of the UK to leave the EU and the election of one Donald J Trump. Both put cyber security in the spotlight in 2016 for different reasons – from the confusing to the bizarre. But it wasn’t just the changing political landscape that caught our eye. Many organisations were affected by ransomware attacks and one high profile business discovered just how costly the on-going fall-out from their data breach would turn out to be. So, let’s look back at 2016 through the cyber security lens of Ascentor. Continue reading “Cyber security in perspective – a look back at 2016” » For some time there has been a looming date in the data protection calendar – 25th May 2018. That’s when the GDPR (General Data Protection Regulation) is set to come into force. Organisations across Europe will then be required to comply with tougher rules to prove they actively protect and more explicitly ask to collect personal data. But, for how long? Thanks to the Brexit vote on June 23rd there’s now a climate of uncertainty over EU regulation compliance and what will happen after the UK leaves the EU. What’s more, 44% of IT professionals in a recent poll indicated they were unaware or only vaguely aware of the new GDPR rules. So what happens now? The Deputy Information Commissioner Steve Wood says that UK businesses are “caught in a confusing place, between looming EU regulation and Brexit.” Continue reading “Cutting through the confusion: GDPR and Brexit” »
2.1 3.1 5.1 7.1 7.2 8.1 9.1 9.2 9.3
U narodnim novinama NN 42/2018 (805), 9. svibnja 2018. godine objavljen je Zakon o provedbi Opće uredbe o zaštiti podataka https://narodne-novine.nn.hr/clanci/sluzbeni/2018_05_42_805.html Hrvatski Sabor je na svojoj sjednici održanoj 27. travnja 2018. godine prihvatio Zakon o provedbi Opće uredbe o zaštiti osobnih podataka. Europska unija donijela je prošle godine novi regulatorni okvir za zaštitu privatnosti naziva Opća uredba o zaštiti podataka (General Data Protection Regulation, kraće GDPR). Uredba će stupiti na snagu 25. svibnja 2018. i za razliku od direktive iz 1995. bit će direktno primjenjiva u državama članicama bez potrebe za implementacijom u nacionalno zakonodavstvo. Opća uredba o zaštiti osobnih podataka Općom uredbom o zaštiti podataka (GDPR) određeni voditelji obrade i izvršitelji obrade dužni su imenovati službenika za zaštitu podataka (DPO). To vrijedi za sva tijela javne vlasti i javna tijela (bez obzira na to koje podatke obrađuju) i za ostale organizacije čija je osnovna djelatnost sustavno i opsežno praćenje pojedinaca ili koje obrađuju posebne kategorije osobnih podataka u velikoj mjeri. Čak i kad se Općom uredbom o zaštiti podataka izričito ne zahtijeva imenovanje službenika za zaštitu podataka, za organizacije može biti korisno dobrovoljno imenovanje službenika za zaštitu podataka.