Ukuqonda Umhlaba Olawulwayo Wogcino - lwazi

I-General Data Protection Regration (GDPR) inika isiseko somthetho osisiseko semisebenzi yokusebenza kogcino-lwazi ngaphakathi kwe-European Union, kuquka ukufuduswa kwamalungu amazwe. Ukufuduselwa kwe-Ireland kugcino-lwazi lobuqu kwamanye amaqabane asekelwe kwi-EU, imbopheleleko yokuqala kukuqinisekisa ukuba i-data iyaqhubeka ifumana umgangatho olinganayo wokukhusela ngalo lonke uhambo lwayo. IKhomishini yogcino-lwazi lwe-data (DPC) isebenza njengegunya elikhokelayo kwimibutho emininzi yamazwe ngamazwe esekelwe eIreland kwaye igxininisa umgaqo wokuziphendulela. Imibutho kufuneka ibhale uxwebhu ogcino-lwazi lwayo, yazi iingozi, yazisemgangxelo kunye nolawulo lobugcisa (TOM) elungele ukuqwalaselwa kolwazi olugqithisiweyo lolwazi. Ngexesha lokufuduselwa koo-UUS.

Inikwe i-Ireland ̱ inendawo ekhethekileyo njengemeko yelizwe elithetha isiNgesi elingurhulumente olilungu le-EU elingenisa ikomkhulu laseYurophu leefektha zezobugcisa ezininzi, ukunqumla i-data ye-translate kusoloko kubandakanya imiqulu emikhulu yogcino-lwazi lobuqu. I-DPC inyanzelisa ukunyanzeliswa kokuphengululwa, ii-face, kunye namaphepha akhokelayo. Kubalulekile kwimibutho yase-Ireland ethetha ngesiNgesi ukuhlala ihleli ikhomba yokulawula iinkcazelo, kuquka impembelelo ye-Schrems II ekudlulisweni kwezizwe ngezizwe kunye ne-ekhomfa-lwazi lwe-data i-̱ imiyalelo ekhuselekileyo (EPB). Nangona le mithetho ithetha ngqo inkxabisiso-o-mgalelo, inyuse inyusa ukuthobela nokulingwa kokhuseleko lwe-data ngaphakathi kwe-GD, ukuqondwa komthetho wesizwe, kunye nemisebenzi yesizwe elungele ukuthunyelwa komsebenzi sokuqala.

Ubuncwane bangaphandle obufana nomthetho [[FLT: 0] okubhaliweyo kwe-EURÍLTES kunye newebhsayithi yeKhomishini yoKhuselo logcino-lwazi inikezela ngokhokelo lwexeshana kunye nezaziso zomsebenzi. Iimbutho kufuneka ziphinde zihlole le mithombo ukucwangcisa imisebenzi yazo yokudlulisa ugcino-lwazi kunye nolindelo lwangoku.

Amanyathelo angundoqo obuchule bokudlulisa ugcino-lwazi olukhuselekileyo

Ulawulo lobuchule luyisiseko sobuchule bokudlulisa ulwazi olukhuselekileyo. Xa ugcino-lwazi luhamba phakathi kwe-Irish kunye ne-EU, lunqamleza iinethwekhi eziquka amacandelo e-intanethi kawonke-wonke, amakhonkco azimeleyo e-MPLS, okanye amathambo enkonzo amathambo enkonzo. Ngaphandle kokomelela kokuvulwa kombhalo ofihlakeleyo nokuqinisekiswa, ulwazi luchanabeka ekuthintelweni, ekuphakamisini, nasekufikeleleni okungagunyaziswanga. La macandelo alandelayo achaza eyona miqathango yobugcisa ibalulekileyo ekufuneka iphunyelwe.

Ukubhala Ngentengiso Naxa Uphumlile

Ukukhowuda kuguqulela ugcino-lwazi ngokungekho mthethweni nabani ngaphandle kwesitshixo esifanelekileyo sokukhupha ikhowudi. Kwi data kuthutho, uKhuselo Lothutho Logcino-lwazi (TLS) 1.2 okanye 1.3 yiprotocol esezantsi ekukhuseleni uthumelo lwe webhsayithi, iquka i API unxulumano kunye nemifanekiso egqithisiweyo ngemiba encinci yefayile esetyenziswayo, iprotocolgrations njenge SFTP (SS Pracce Colution Yothulotry ekhoyo) kunye ne FTPS (FTS ngaphaya kwe SSLS/ TLS) inikeza ukukhowudwa ngokunamandla kogcino-data kunye nesiqinisekiso. Intlanganiso kufuneka iqinisekise ukuba unikezelo lwemijelo lwemijelo lwemijelo luqinisekise ukuba unikezelo lwemijelo lwemijelo.

Ukuzalisekisa iinkcukacha zomba: iziqinisekiso kufuneka zifumaneke kubasemagunyeni beSatifiketi abathembekileyo (CASE), amaqhosha e-SSH kufuneka ajikeleziswe ngamaxesha athile, kwaye amathala eencwadi okukhowuda kufuneka agcinwe ebekwe malunga nee-vlativitis ezaziwayo. I-European Union Agency for Cybersecurity (ENISA) ipapasha [[FL:0] u-Guinence kwii-algority kunye nabalawuli bamaqhosha[, apho amaqela e-Irlands anokusebenzisa ukuphawula izenzo zawo zokukhowuda.

Imithetho yokuziphatha yonxibelelwano ekhuselekileyo

Ngaphandle kokukhowuda, ukhetho lwemithetho yokusebenza yonxibelelwano luchaphazela ukhuseleko. i-HTTP, i-S, i-SFTP, kunye neWebDAV ngaphezulu kwe-HTTPs zifanelekile kugqithiso oluninzi lwesicelo. Indlela yokwenza udibaniso olubandakanya i-hostsons zokwenene ze-data ye-1965, iqwalasela ukusebenzisa i-PN i-PPPPP isebenzisa ii-PPPPPPP ezikhoyo, icuthene nokusetyenziswa konxibelelwano lwenethwekhi yobuqu, njengo AWSDPrecrecrease okanye u-ASCreexRC, ukugqithisa okanye ukudluliswa kwe-edemode. Ngelingagqibekanga, ngelixesha lokusebenza okungagqibekanga.

Ubungqina kunye nezilawuli zokufikelela

Ukuqinisekisa uchazo lwazo zombini umthumeli kunye nesamkeli ayisetyenziswa. Uqinisekiso oluninzi (MFA) lumele lube lunyanzelekile kuko nakuphi na ukusetyenziswa komphathi okanye umsebenzi wokudlulisa. Iziqinisekiso zamanani, umxhasi {89 head TLS tifiketi, kunye ne SSS iindlela eziqhelekileyo zomthumeli kunye noqinisekiso. Imisebenzi esekelwe ekufumaneni ulawulo (RBAC) iqinisekisa ukuba abasebenzi abagunyazisiweyo kuphela banawo amandla okusungula okanye okulungisa uqwalaselo. Uchazo kunye nolawulo lokufikelela (IAM) imigaqo yemithetho kufuneka ilandele umgaqo welungelo elincinane, inika kuphela iimvume ezifunekayo ekwenzeni umsebenzi. Izikripti ezigqithisiweyo azinazo kufuneka zimele zingasebenzi kwi-exandex; endaweni yoko, sebenzisa izixhobo zolawulo lwemfihlelo njenge HasChiporvers okanye izigcini-osinqo.

Uphicotho-zincwadi oluthe rhoqo lwezithintelo zonikezelo kunye neziganeko zokuqinisekisa lunceda ukufumanisa umsebenzi ongaqhelekanga. Imigaqo ye-EDPB kumlinganiselo wobugcisa incomela ukugawula ngempumelelo kwaye ayiphumelelanga imigudu yokuqinisekisa kwaye igcine iinzame zokuqinisekisa zexesha elihambisana nenkqubo yogcino-lwazi lombutho. Ukudibanisa ezi zingoonolwazi ngokhuseleko kunye noLawulo lwezehlo (SIEM) kunceda inkqubo yokulumkisa ixesha lokwenene lokuziphatha okukrokrelekrelenayo.

Ukuqinisekiswa kwengqibelelo yogcino-lwazi

Ukudluliswa okukhuselekileyo akuthethi nje ngokufihla imfihlo kodwa kwakhona kukwayiyo ukuthembeka. Ii-algorithm ezininzi ezifana ne-SHA_256 okanye SHA 76512 zingasetyenziswa ukuvelisa ii-checksums phambi kokudluliswa. Iqela elamkelekileyo ngoko liphinda lifake i-hash kwaye lithelekise nexabiso lomthumeli. Nayiphi na intembeko ibonisa ukuphamba okanye ukunganyaniseki. Ukudlulisa iprojekthi ezininzi zefayile, kuquka i-SFTPHP kunye ne-HTTPS, kubandakanya ngokuzenzekelayo uvavanyo lwengqibelelo ugqitho olusuka kwi-MAC (Ikhowudi yobungqina). Kwimimiselo enzima yogcino-lwazi olubalulekileyo, imibutho iyakwazi ukuzalisekisa utyikityo lwemicimo lwemivo ukuze kunikezelwe olungelu hlobo, ingqina ukuba ugcino-data lusuka kwinto ethile kwaye lungaguqulwangalungiswanga kwi-transty.

Imisebenzi Yesakhelo Sasemthethweni Nezikhuseli Eziqhelekileyo

Ngeli xesha amanyathelo obuchule abalulekileyo, ukhuseleko olusemthethweni lunika isakhiwo sokuziphendulela ngokusemthethweni esifunekayo yi-GDPR. Kwii-intra preseeU imbopheleleko esemthethweni yesivumelwano sogcino-lwazi (DPA) phantsi kweGatya 28, ekufuneka ukuba ibe kwindawo xa umqeqeshi ephatha idata yobuqu ngenxa yomlawuli. Ngaphezu koko, imibutho kufuneka iqwalasele imithetho ebophelelayo yequmrhu (BCRCR) yothumelo lweqela leqela, nangona ii-BCRC zenzelwe kakhulu amaqela ahlukahlukeneyo akhuphela ulwazi ngaphandle kwe-EU. Kwi-EU, ulawulo olungagqibekanga phantsi kwesahluko V lusebenza kwisithathu solawulo lwe-656 lolawulo; ngoko ke, intlangano ezininzi zase-Ireland kufuneka zikhethe ukulungiselela i-SCC okanye ii-BCRCRC ziqheliselwa kakuhle njengoqeqesho olungcono lokukhusela ulwazi olugqithisileyo olugqithisileyo, nokuba kudlule lonke, nokuba kuhambo lwendawo.

Izivumelwano zogcino-lwazi ezilungiselelayo (DPAs)

Phantsi kweGatya 28, iDPA kufuneka icacise umba wesihloko, ubude bexesha, kunye nenjongo yokulungiselela, kunye nohlobo logcino-lwazi lobuqu kunye neendidi zee-data. Isivumelwano kufuneka simisele iimfuno ezithile kumphathi-zomsebenzi: ukulungiselela kuphela kwimiyalelo ebhaliweyo, ukuqinisekisa imfihlelo yabasebenzi, ukuzalisekisa amanyathelo okhuseleko afanelekileyo, ukunceda umlawuli onelungelo lokufumana ulwazi kunye nokwaphula iziqinisekiso, kunye nokucima okanye ukucima ugcino-lwazi ekupheleni komsebenzi. Kuba intrapangoEEU i-etrastyreas, iDPA kuphela yanele ukwanelisa imfuneko elawulayo, ukuba umlawuli wenkqubo ubekwe ngaphakathi kwe-Union okanye kwilizwe lesithathu eligqunywe sisigqibo sokuzinzisa. Imibutho yase-Ireland kufuneka iqinisekise ukuba iDPA iphinde ityikiswe nayiphi nayiphi naleyo ingeniso ecacileyo kunye namalungelo olungeleneyo.

Imithetho ka-Claus oPhakamileyo kunye neKhorporate eKhokelayo

Nangona ii-SCCC zinyanzelekile kuphela ukufuduselwa kumazwe esithathu, amaqumrhu amaninzi ase-Ireland aquka ngokuzithandela kwizivumelwano nabaququzeli beenkqubo ezisekelwe kwi-EU. bamisela isiseko somthetho ngaphaya kolwalamano lonke. Ikhomishini yeNkqutyana yaseYurophu ephucukileyo yeSCC(21) igubungela uludwe olubanzi lwezimo, kuquka umphathi ngqameko kunye nomqeqeshi wobuchule. Zikwaquka nelungiselelo lamalungelo omxholo ugcino-lwazi, ityala, kunye nentsebenziswano nabasemagunyeni abaphathi. Kwii-BCRR ezikhoyo zingamkelwa ukuze kuvezwe inkqubo yokhuseleko olufanayo esetyenziswa kwiqela ngalinye elingaphakathi, ngaphandle kwendawo. Ngoxa kufumana ugunya elifanelekileyo lomphathi ulawulo olubanzi, lunika ukunikezela nokuzibotshwa okunzulu kwe-data.

Izenzo ezisebenzayo zokhuseleko logcino-lwazi oludlulisiweyo

Ngaphezu kwemigaqo-nkqubo emileyo nokumiselwa kobuchule, ukudluliswa kogcino-lwazi olukhuselekileyo kufuna ingqeqesho eqhubekayo esebenzayo. Izisongelo zokuguquka, utshintsho lolwalamano loshishino, kunye neemfuno zokuthobela ziyahlaziywa. Ezi nkqubo zilandelayo ziqinisekisa ukuba ukhuseleko luhlala lusebenza ngexesha.

Uphicotho-zincwadi

Ukudluliswa kogcino-lwazi kufuneka kuvelise ungeno lwengxelo yokhuseleko olubamba ihestamp, imvelaphi kunye nendawo ye IP, ubungakanani be-data, iprotocol, kunye nesiphumo (impumelelo okanye ukungaphumeleli). Ezi zixhobo zisebenza njengobungqina bophicotho-zincwadi olusetyenziswayo kwaye njengecebo lefontensic kwisiganeko sokhuseleko. Iingxelo mazigcinwe kwiprojekthi yendlela engalindelekileyo yokufaka ulwazi, ngokufanelekileyo kwinkqubo yokugawula eyahlukileyo ekwahlukeneyo ukusuka kokusingqongileyo. Imithetho yokuhlola ezenzekelayo iyakwazi ukujijela i-bhamsssss njengemiqulu yogcino-lwazi olungaqhelekanga, emva kweeyure ezingama-6, ukugqithisa ukuqinisekisa okuphinda-phinda-phinda-phinda-phinda-phindayo, okanye ukugqithisa kwidilesi ze-IP. Izilumkiso kufuneka zikhuliswe kwiqela lokhuseleko lweqela (OC) lokuphanda-ndlela.

Ukuceba Ukusabela

Ngaphandle kwazo zonke izilumkiso, ulwaphuko lungabakho. Iintlanganiso mazibe nesicwangciso sempendulo ekhawulezileyo yeziganeko zokhuseleko logcino-lwazi oludlulisiweyo. Isicwangciso kufuneka sichaze iindima kunye neembopheleleko, iziqhagamshelanisi, imigaqo yonxibelelwano, kunye neelayini zexesha lokwazisa phantsi kweGatya 33 (72 yeeyure kwigunya lomphathi) kunye neGatya 34 (unxibelelwano kwimibandela yogcino-lwazi). Ukuziqhelanisa rhoqo kwi tafile ephezulu kunye nemfaniso ziqinisekisa ukuba iqela lingaphumeza ucwangciso phantsi koxinzelelo. Kumalungu ase-Ireland, i-DPC alindele ukukhawulezisa nokunika ingxelo ngokucokisekileyo; ukulibazisa okanye ukungazimisela okungagqibekanga kungaphumela kwizinto ezibalulekileyo.

Iimpinda Zokhuseleko Ezithe rhoqo Nokuhlaziya

I-Software ezi-vnerarible, ishiyiwe i-apply algorithms, kunye nokumiselwa kwenkqubo ephelelwe lixesha ziindawo zokungena eziqhelekileyo zabahlaseli. Izinto ezikhoyo zase-Irish kufuneka zicwangcise ukuhlomela ukuchanabeka kwamaxesha ngamaxesha kunye neemvavanyo zokungena ezithe ngqo ezijolise ixhoba lokudluliswa kogcino-lwazi, kuquka ii-aPI subreads, kunye neeseva zokudlulisa iifayile. Iinkqubo zolawulo lwe-paplue kufuneka zilugxeke uhlaziyo lwethala leencwadi le-TLSLS, i-SSH, kunye ne-software ye-software. Ukongeza, imijikelezo yesivumelwano kufuneka iqinisekise ukuba i-DPAs kunye ne-SCC zihlale zilungelene sikhokelo samva. Xa kusenzeka utshintsho olubalulekileyo (umz. g., inkqubo entsha esetyenziswayolwazi-data entsha)

Uqeqesho lwezithuthi

Imposiso yomntu ngunobangela ophambili wokwaphuka kogcino-lwazi. Abaqeshwa abaphatha ukudluliswa kogcino-lwazi kufuneka baqeqeshwe kwiinkqubo ezichanekileyo, kuquka indlela yokuqinisekisa ukuba umamkeli wamkelekileyo, indlela yokufihla iifayile phambi kokuthumela, nendlela yokuqaphela imigudu yokudlulisela ixhoba iisiqinisekiso. Uqeqesho kufuneka luqaliswe rhoqo ngonyaka kwaye longezelelwe ngonxibelelwano olujoliswe kulo xa kuvela izisongelo ezintsha. Impucuko eyomeleleyo yokhuseleko inciphisa amathuba okuchanabeka ngokwengozi kwaye iqinisekisa ukuba abasebenzi bayazi indlela yokuchaza umsebenzi okrokrelekileyo.

Impembelelo yokhuselo logcino-lwazi (DPIA)

Inqaku le-35 lifuna i-DECA nanini na ukuthunyelwa kolwazi lobuqu kusenokuphumela kumngcipheko omkhulu kumalungelo kunye nenkululeko yabantu ngabanye. Ukugqithiselwa kogcino-lwazi olunochuku, ulwazi lwempilo, i-biometric data, iirekhodi zemali) phakathi kwe-Irish ne-EU kusenokubangela le mbopheleleko, ingakumbi ukuba ukufuduswa kubandakanya ukwenziwa kwe-data ephezulu okanye ubugcisa obutsha obunobuchule obufana nothintelo okanye umgangatho we-Al. Isiphumo sobuphini obucwangcisiweyo sobungakanani bomsebenzi, sichaza iingozi, kwaye sichaza amanyathelo okuzikhulula. Ukufudusa-data, i-DEA kufuneka igqume i-data ehambayo, ubuchule bobugcisa kunye nokulawula kwemiqatha ekhoyo kwindawo ethile emva kokusetyenziswa kwe-SPA. Isiphumo sobuchazibo simele siqale ukuchaza kwakhona, ukuba kubekwe kwakhona, ukusetyenziswa kwegunya eliphezulu lomphathi-A.

Isiphelo

Ukudluliswa kogcino-lwazi olukhuselekileyo phakathi kwe-Irish kunye ne-EU kufumaneka ngokudityaniswa kolawulo lobugcisa olomeleleyo, ukukhusela okucacileyo, nokugada okusebenzayo. Ukuququzelela nge-GDPR asiyoprojekthi enye emalunga ne-2001 kodwa sisivumelwano esiqhubekayo esifuna uhlolo oluthe rhoqo kunye nokuzinzisa izisongelo ezintsha kunye nenkqubela phambili. Ngokusebenzisa ugcino-lwazi oluqinileyo, ukuqinisekisa okunamandla, ukudibanisa ii-'alogs, kunye nokusebenza okubanzi kwe-DPAs, iqumrhu liyakwazi ukucutha umngcipheko wokuchaphaza nokuthemba amaqabane kunye nee-data ngokufanayo. Ukusebenzisanaba phakathi komthetho we-Irish, imimiselo ye-EURGU, kunye nemigangatho yezobugcisa kwenza ugcino-mthetho oluntsonjulukileyo kodwa olulawulayo, oludityaniswe ukudlulisela ulwazi kuzokukhuselwa kokhuseleko kuya kudibana kwaye kuvavaniswa nocelomngeni lwangoku. [AGenest] kukhuseleko oluthetio-A.[1] kunye nolunyuse-------