I-Ireland engazifaki ngeniso imbopheleleko engcwele kunye nabanikeli bazo. Ngalonke ixesha umntu esenza isipho, bayabelana iinkcukacha zobuqu (igama, idilesi, ulwazi lwemali, mhlawumbi iinkcukacha zentengiselwano ezibonisa ukuba buthathaka. Ukukhusela ukuba i-data asiyondlela esemthethweni nje esemthethweni; litye lesiqinisekiso sokuthembeka komnikeli. E-Ireland, izibonda ziphezulu. I-General Data Protective Regraving (GR) ifaka imilinganiselo engqongqo yemfihlo ekhoyo ehlabathini, kwaye i-ekhomba engekho nzuzo iphantsi kwemithetho yayo. Ukuphatha ngokuphosakeleyo i-data kungakhokelela ekuhlawulweni okunzima, ekonakaleni kodumo, ukuchasana noncedo lwenkxaso. Eli nqaku libeka ngaphandle kwe-ephakal-mforeagethiss (ievery-evertpoints, i-ective systrup) kunye nokulungele ukusetyenziswa kwayo, imigaqo elungele ukubonakalisa kakuhle.

Umhlaba oPhawulweyo: Umthetho weGDPR noMthetho woKhuselo loMgaqo-siseko wase-Ireland

Ukuqonda ukwakhiwa komthetho yindawo yokuqala nayiphina indlela yogcino-lwazi enoxanduva. Iinzuzo zase-Irish kufuneka zihambelane nezixhobo ezibini ezingundoqo: i GDPR (Umiselo (EU) 2016/679) kunye [[[FLT:]] Ukhuselo lwedate 2018 , oluzalisa kwiinkcazo ezithile zohlanga. IKhomishini yoKhuselo (DPC)[FLT] ligunya elizimeleyo eIreland, kwaye lizinyanzelela ngokukhutheleyo ezi mithetho enqamle wonke amacandelo, kuquka nemisebenzi.

Imigaqo engundoqo yeGDPR kugcino-lwazi lomnikelo

IGDPR yakhiwe kwimigaqo esixhenxe ebumba ngqo indlela izinto ezingancediyo ezifanele ziphathe ngayo ulwazi lomnikeli:

  • [[NTLA] Ukungabikho komthetho, okusesikweni, nokubonakala ngaphaya — Kufuneka ube nesiseko esisemthethweni esisemthethweni (ngokuqhelekileyo imvume okanye umdla osemthethweni) kwaye uchaze ngokucacileyo indlela esetyenziswa ngayo i-data.
  • [[NTL:0] Umlinganiselo [ -qokelela ugcino-lwazi kuphela ngenjongo ezichaziweyo, ezicacileyo nezisemthethweni (umz., ulungiselela umnikelo kwaye uthumele irisithi).
  • Ubalo lwenani elincinane [[FLT: 1] - qokelela kuphela oko kuyimfuneko. Buza: Ingaba ngokwenene siyalufuna usuku lomniki lokuzalwa kwesipho esinye esingekhoyo?
  • Accurity - Gcina irekhodi yomnikeli ide ibe yeyokugqiba kwaye uyilungise ngokukhawuleza xa ucela.
  • Umlinganiselo — ugcino-lwazi lweRetain alusekho ncam. Chaza ucwangciso lokugcina iirekhodi zomnikelo, ii-internationals ezikhetha unxibelelwano njl.
  • [[UMTL:0] Ukhuseleko kunye nokufihla imfihlo — Sebenzisa amanyathelo obugcisa kunye nombutho ofanelekileyo ukukhusela ugcino-lwazi ekufikeleleni, ekulahlekeni, okanye kumonakalo.
  • ukufumaneka kwemali — Yiba nako ukubonakalisa ukuhambelana nayo yonke imigaqo, kuquka ngemigaqo, iirekhodi, kunye noqeqesho lwabasebenzi.

Ukuqwalaselwa Ngokukhethekileyo Kumthetho WaseIreland

UMthetho woKhuselo loMphicotho-zincwadi 2018 unika imithetho eyongezelelekileyo enxulumene nokungancedi ngeniso. Umzekelo, imisela ixesha lokuvumelana kwamanani ngeminyaka eli-16 (GDPR engagqibekanga yayingu-16 kodwa yavunyelwa ukuba ingaphantsi; i-Ireland yakhetha 16). Ukuba ingeniso yakho engasebenziyo ngabaniki abaselula okanye amatsha abangaphantsi kweminyaka eli-16, ufuna imvume yabazali okanye yabagcini-mthetho. Umthendeleko unika amandla omeleleyo onyanzelekileyo, kuquka ukukhupha intlawulo oluphezulu lwe-CPC ukuya kunyuko lwezigidi eziyi-CDD20 okanye 4% yojikelezo nyaka. Xa imibutho emininzi isebenza ngoqingqoqingqo-mali eqinileyo, kwanentluvo oluncinane oluncinci lungatshabalalisa. Ngaphanziswayo, i-DPC ingakhalimela, imisele okanye i-onqathe kokugqibela ukwenziwa komsebenzi, kunye nomyalelo osisigxinawokusetyenziswa.

Isizathu Sokuba Ukhuseleko Logcino-lwazi Lungancedi: Ukuthembana, Ukubekwa Esichengeni

Abanikeli banikela ngenxa yokuba bekholelwa kuthumo lwakho. Ukuphulwa kogcino-lwazi lwabo lobuqu kulwalo nkolelo, ngokufuthi engalungisekiyo. Ngokutsho kophando [[FLT: 0] NONYE nezinye iinja ezinceda abasebenzi abancedayo, ukuthembana kungunobangela omkhulu wokuzigcina ungenamdla. Ukuba abaxhasi baxhalabile ngolwazi lwabo, bangayeka ukupha/okanye, bangathetha ngokuchasene nequmrhu lakho.

Ii-Irish ezingeyongeniso zikwajongene nohlolo olusuka kwiCharities Regural, elindele ulawulo olufanelekileyo. Ukuphulwa kogcino-lwazi kungabangela uphando kungekuphela nje yi-DPC kodwa kwanangomlawuli, kutshabalalise ubume bonikezelo lwezibonelelo kunye nokuthembeka koluntu. Kwicandelo elakhiwe ngentsebenziswano, ukuphathwa kogcino-lwazi akungongezelelweyo; kusembindini kumsebenzi.

Ngaphezu koko, ixabiso loqhawulo-qhawuko lingaphezulu kakhulu kunentlawulo. Kusenokufuneka ukuba umazise abantu abachaphazelekayo, ungenise imali kwimisebenzi yokuhlola amatyala, uqeshe iingcali zetyala, uqeshe iiyure ezilawula unxulumano lukawonke-wonke. Kwingeniso encinane, enokuthi ikhuphe ii-asethi ezinokuxhasa unobangela. Ukulondolozwa komsebenzi kuluncedo kakhulu kunexabiso elikhulu kunelokulawulwa kweengxaki zonyango.

Owona Mqheliso Ulungileyo Wokulondoloza Ugcino-lwazi

Ukuguqulela izibopho ezisemthethweni kwimisebenzi yemihla ngemihla kufuna izenzo ezicacileyo. Ngezantsi zizenzo ezibalulekileyo, nganye yazo inweliswe ngokhokelo olusebenzisekayo lwezase-Ireland ezingaveli ngeniso.

1. Linganisa ukuqokelelwa kogcino-lwazi ukuze kufunyanwe okuncinci

Ubalo logcino-lwazi lolunye lwemigaqo elula kodwa engahoywanga. Phambi kokuba wongeze umhlaba kwifomu yomnikelo wakho, buza: Ingaba sikufuna ngokupheleleyo oku ukulungiselela isipho nokugcina ulwalamano lomnikeli? umzekelo, awufuni umnikeli ukuba asebenze okanye afumane ingeniso yonyaka ukuthumela irisithi.

  • Igama kunye neenkcukacha zokuqhagamshelana (i-imeyili, ifowuni, idilesi yeposi xa kuyimfuneko).
  • Inkcazelo ebhatalayo (ehambiswe nge PCIשcompliant sue; sukugcina amanani apheleleyo amakhadi).
  • Umlinganiselo wesipho nomhla.
  • Naziphi na izinto ezifunekayo ezikhethekayo zonxibelelwano (umz., khetha Shiwanin kumaphepha eendaba).

Ukuba ufuna ukusebenzisa ugcino-lwazi ukuze uxilongwe okanye uxilongwe ngobutyebi, kufuneka uvume ngokucacileyo kwaye unikele uthethelele olucacileyo. Phepha isilingo sokugcina ugcino-lwazi “ukusuka nje.” Ugcino-lwazi oluncinci luthetha ubungozi obuncinci.

2. Ugcino-lwazi olukhuselekileyo kunye nodluliso

Apho i-data yomnikeli ihlala khona kwimicimbi. Sebenzisa iisiseko sogcino-lwazi esifihlakeleyo esiqulunqwe kwiiseva ezikhuselekileyo, ngokufanelekileyo kwi-European Economic Area (EEA) ukwenza lula ukuhambelana kwemida ``````'. Ukuba usebenzisa izisombululo zamafu' (umz., i-Mailchimp, okanye i-CRM), qinisekisa ukuba umnikezeli yi-GDRROmpliant kwaye unezivumelwano zokudibanisa indawo endaweni.

Uguqulelo lufanele lugqume ezimbini zeengxelo:

  • Comment=I meta ephumleni — idata egcinwe kwisiseko sedata, ugcino-lwazi, kunye neefayile ezigciniweyo.
  • DATA kuthutho — ulwazi olunyakazisa phakathi kwezixhobo ezinikezelayo, i website yakho, kunye neenkqubo zangaphakathi. Ngamaxesha onke sebenzisa i-HTTPS (SSL/TLS) kunye nofihlo lwe-imeyili okanye udluliso olukhuselekileyo lwefayile kumaxwebhu anochuku.

Qwalasela ubuchule bobuxoki xa kufuneka uhlolisise ugcino-lwazi ukuze ufumane ingxelo. Umzekelo, ungafaka i-ID eyodwa kugcino-lwazi lwakho ukuze ubuchule bungabhenqi ubunikeli be-SCM.

3. Uzalisekiso lwezilawuli ezinamandla zokufumana

Asinguye wonke umntu kumbutho ofuna ukubona iingxelo ezipheleleyo zomnikeli. Sebenzisa indima [1] yolawulo lokufikelela (RBAC) ukunika iimvume kuphela kumalungu abasebenzi afuna imisebenzi. Umzekelo:

  • [[UMTL: 0] Iqela elihlaziyayo — kungafuneka ujonge iinkcukacha zoqhakamshelwano kwaye unikele ngembali ukuhlakulela ulwalamano.
  • [[UMTL: 0] Iqela elinamacala [ — ingafuna iimali zesipho kunye nemihla, kodwa hayi iinkcukacha zoqhagamshelwano lobuqu.
  • [[UMTL: 0] Iqela lokuphawula — lingafuna iidilesi ze email zamaphulo kodwa hayi idilesi epheleleyo okanye inombolo yomnxeba.

Sebenzisa amagama agqithisiweyo, uqinisekiso olunamandla (MFA), kwaye faka konke ukufikelela kwiirekhodi ezichukumisleyo. Iimvume zokuhlola rhoqo, ingakumbi emva kokunduluka kwabaphathi okanye utshintsho lwendima. Owayesebenza engonelisekanga nongasamkeli uyingozi.

4. Uqeqesho lwezithuthi zomkhosi nolwazi oluthe rhoqo

Ubugcisa bunamandla kuphela njengokuba abantu bebusebenzisa.

  • Indlela yokubona imigudu yokufaka i-pishing (indawo zokungena eziqhelekileyo zesihlenga).
  • Ukuphatha ngokukhuselekileyo uluhlu lomnikeli oshicilelweyo (ungaze uwushiye edesika okanye kwiindawo zikawonke wonke).
  • Icebo lokuxela uqhekeko logcino-lwazi olurhanelekayo (ngoko, hayi “xa ubuyela eofisini”.
  • Ukubaluleka kokunciphisa ukwandisa ugcino-lwazi nomngcipheko “wokuthumela i-imeyili ekhawulezayo” nabamkeli abaninzi kwindawo ethi Iya (sebenzisa izixhobo ze-imeyile ezikopela ngokufihlakeleyo okanye ezingangeni maza-ngasayinwa).

Amalungu ebhodi yololiwe nawo. Ulawulo lukwandisa ukhuseleko logcino-lwazi, kwaye amalungu ebhodi kufuneka aqonde iimbopheleleko zawo.

Ugcino-lwazi Luchanekile Luze Lucocwe Ngokuthe rhoqo

Unikezelo logcino-lwazi luyabola ngexesha. Abantu bayahamba, batshintshe iidilesi ze email, okanye badlule. IShedyuli yophicotho-zincwadi lwedata rhoqo (umz., okanye ngokuphindwe kabini) ukuchonga, okungalunganga, okanye iirekhodi zokuphinda-phinda. Sebenzisa idata > izixhobo zokucoca okanye iinkonzo kumgangatho wedilesi kwaye ukususa iikopi. Ukugcina ucoselelo akunciphi nje kuphela ugcino lwemingcipheko kodwa kuqinisekisa ukuba unxibelelwano lwakho lufikelela kubantu abalungileyo /ukudedambisa ihlazo lokuthumela isicelo somnikelo kumntu ofileyo.

6. Beka ulawulo lomthengisi kunye nowesithathu 76

Ingeniso engekhoyo isoloko ixhomekeke kubarhwebi bangaphandle ukwenzela ukulungiselela ukuhlawula, ukuthengisa i-imeyili, ukuthuma okanye ukuchasana. Iqela ngalinye lesithathu liba ngumqhubekekisi wogcino-lwazi, kwaye i-GDPR ifuna ukuba ube nesivumelwano esibhaliweyo nabo esichaza iimbopheleleko zabo. Phambi kokuba ube nenxaxheba nayiphi na inkonzo:

  • Uthengisela isiqinisekiso sokhuseleko (umz., ISO 27001, SOC 2).
  • Hlola inkcazelo yabo (DPA) ukuze uyiqinisekise ukuba ivisisana nemilinganiselo yaseIreland.
  • Misa apho ugcino-lwazi luza kugcinwa khona. Ukuba umthengisi udlulisa ugcino-lwazi ngaphandle kwe-EEA, kufuneka kubekho ubuchule bokudlulisela obaneleyo (umz., UKûto naaEU isigqibo sokungafundi kwe-UK.siaeu sabaqhubi benkqubo esekelwe kwi-UK.6e, okanye u-Claus oqhelekileyo kwabanye).

Musa ukuthatha isixhobo esaziwayo esizizingela ngokuzenzekelayo. Umzekelo, iiplatfomu ezithile ze-US.NG SOUS.

7. Yenza isiCwangciso soMxholo-nkqubo weNkcubeko

Nangona ngezixhobo ezinamandla, utyibiliko lungayenzeka `a laptop, i-email etyibilikayo etyibilikayo, impazamo engaphakathi. Impendulo elungiselelweyo ingenza unciphiso lomonakalo kwaye ibonise ukubekeka koxanduva. Isicwangciso sakho kufuneka siquke:

  • Iqulathe amanyathelo aqulatheyo[[FT:1] - umz., ukuqhawuka kwenkqubo ezichaphazelekayo, ukutshintsha amagama okugqithisela, ukugcina ii-logs.
  • Isaziso seInternal — itsheyina elicacileyo lomyalelo: ngubani ofuna ukwazi? (igosa loKhuselo loMgaqo-mkhosi weData, iCEO, ibhodi.)
  • Uvavanyo [ — yiyiphi i-data eyachaphazeleka? Bangaphi abanikeli? Ingaba umngcipheko uphezulu?
  • [[NTL: 0] Isaziso sesazisi-nkqubo [[FLT: 1] - i-GDPR ifuna ukuba wazise i-DPC kwiiyure ezingama-72 zokwazi ukuchasana, ngaphandle kokuba kunokwenzeka ukuba kuphumele engozini kubantu ngabanye. Kusenokufuneka ukubazisa abo bachaphazelekayo ukuba uqhawulo lubangela ubungozi obukhulu (umz., ugcino-lwazi lwemali luye lwehlahlo).
  • [[UMTL: 0] Isikhokelo soququzelo — iingxelo ezilungiselelwe abanikezeli, abalawuli, kunye noluntu (okulungele ukucwangcisa).
  • Uhlolo lweposi(] — lungisa unobangela ongundoqo, imigaqo yokuhlaziya, kunye nabasebenzi abaqeqeshelwe ukuphinda bafumane.

Icebo lakho livavanywe ngemithambo ekwitafile.

Ukwakha Isithethe Sokukhusela Ugcino - lwazi

Ukuququzelela asiyonto nje ejongeka kwiibhokisi. I-DPC ilindele imibutho ukuba ikhusele ugcino-lwazi kwinkcubeko yayo. Oku kuthetha ukubotshwa kokhokelo: ibhodi ne-CEO kufuneka ixhase imisebenzi yogcino-lwazi yoxanduva, hayi nje ukuthumela kumphathi---IT. Ukubeka umphathi wokhuselo logcino-lwazi (DPO) ukuba kufuneka `````GDPR'''' ugunyazisa omnye ukwenzela imibutho eqhuba umlinganiselo omkhulu wogcino-lwazi olukhethekileyo (njengolwazi olungolwazi olungokwasempilweni okanye iimbono zobupolitika). Nokuba ngaba lungafuneka lungadibaniselwanga, ukuba nomphathi-ofisi onikezelweyo uqeqesho lunguqheliselo olufanelekileyo lokubonisa ubunono bonikezelo kunye noopha.

Yenza iinkqubo zangaphakathi ezifikelelekayo neziqondakalayo: inkqubo yokhuseleko logcino-lwazi, ucwangciso lokugcina ugcino-lwazi, isaziso sobuqu (esimele sinikelwe kubanikeli ngexesha lokuqokelelwa kogcino-lwazi), kunye nenkqubo yokuphendula yesiganeko. Hlola le nkqubo minyaka le nasemva kwayo nayiphi na inguqu ebalulekileyo kumsebenzi. Okokugqibela, gcina iirekhodi zemisebenzi yokulungisa (ROPA) njengoko kufunwa liQumrhu lama-30 le GDPR. Amaxwebhu eROPA oko umele ukukuphathele ugcino-data lobuqu, isizathu sokuba ulubambe, apho luvela khona, kwaye ngubani oya kulwa nalo. Luxwebhu lokuqala oluya kubuza ngophicotho.

Ukubonisana Kwabantu Uze Uhlonele Amalungelo Abanikazi

Abanikeli banelungelo elinamandla phantsi kwe-GDPR, yaye ukuhlonela kwabo kwenza abantu bathembeke. Isaziso sakho sokuba wedwa kufuneka uwachaze ngokucacileyo la malungelo:

  • [[UMTL:0] Ekunene kufuneka uxelelwe [ — sele yanelisekile ngokwesaziso sakho sabucala.
  • [[UMTL:0] Ilungelo lokufikelela — abanikeli bangacela ikopi yedata yabo kwinyanga enye (ngaphandle kwentlawulo).
  • [[UMTL:0] ekunene kukwahlulelwa - ugcino-lwazi oluchanekileyo olungalunganga.
  • ekunene ukuqinisekisa [ [“kulungile ukuba kulityalwe”] — abanikezeli bangacela ukucinywa kwedata yabo, phantsi koonxaxhi abathile (umz., inyanzelo esemthethweni yokugcina).
  • ekunene kumda woqhubekeko [[FLT: 1] — abanikezeli bangamisela umda indlela osebenzisa ngayo ugcino-lwazi lwabo ngelixa ingxabano isisombululwa.
  • ekunene kugcino-lwazi olukhoyo - bangafumana ugcino-lwazi lwabo kulungiselelo lomatshini {0}.
  • ekunene ukubeka into — abanikezeli bangala ukulungiselela urhwebo oluthe ngqo (kufuneka ume ngoko nangoko) okanye ukukhuphela phezulu.

Phendula ngokukhawuleza kwezi zicelo kwaye bhala iimpendulo zakho. Qeqesha abasebenzi abaphambili abanokufumana izicelo zomlomo (umz., kwisiganeko) ukuze bazenze zinyuke kwi DPO okanye uqhagamshelwano olukhethiweyo.

Isiphelo: Ukhuseleko Logcino - lwazi Njengobuhlobo Obunentsebenziswano

Ukukhusela i-data yomnikeli ngenkathalo asikokuthobela nje umthwalo obalulekileyo, oku kuyingenelo. Abanikeli abathemba ukuba inkcazelo yabo ikhuselekile bayakwazi ukunikela ngokuphindaphindiweyo, ukwabelana ngezizathu zabo, bandise inkxaso yabo. Iinzuzo ezingasetyenziswayo e-Ireland zisebenza kwindawo eqinileyo kodwa elungeleleneyo. Ngokuqonda iGDPR kunye nomthetho wase-Ireland, ukusebenzisa izikhuseli ezisebenzisekayo, ukukhuthaza impucuko yangasese, nokuhlonela amalungelo omnini-mali, ungaguqula idata ibe yintsika yokunyaniseka. Qalisa namhlanje: ukuqokelela izakhiwo zakho zogcino-data, ukuhlaziya uqeqesho lwakho, nokuqinisekisa ukuba utyekele icebo lakho lilungile. Ngokwenjenjalo, uzukisa abanikeli bakho, ukhusela indawo yakho obeke kuyo kwaye ukhusela amalungelo enkonzo yakho.