Ukwazisa: Isizathu Sokuba Ugcino - lwazi Lukhusele Imibandela Ephuma EIreland

Ukugqithiselwa kweenkqubo zoshishino eziya e-Ireland kuye kwaba yinto ecwangcisiweyo kwiinkampani ehlabathini lonke. Eli lizwe linika abasebenzi abanobuchule obuphezulu, imeko-ntle yerhafu entle, kunye nenkqubo esemthethweni elungelelaniswe nemigangatho ye-European Union. Noko ke, ngokudluliselwa kwe-data yobuqu kwiqabane langaphandle kungumsebenzi obalulekileyo. Ukwaphulwa okanye ukungahambelani nemigaqo kungaphumela ekungathembani komthengi, izigwebo ezisemthethweni, kunye nomonakalo odumileyo ongaphezulu lee lee nayiphi na intengo yemali egciniweyo. Eli nqaku linikela isikhokelo esisebenzisekayo, ngo-1979 sesikhokelo sobuqu sokukhusela ugcino-lwazi lobuqu xa lungekho kwizinikezelo lweenkonzo, izibophelelo ezingomthetho, izikhungo zomsebenzi, kunye nezicwangciso-zigunyaziso ezithe ixesha elide.

Ukuqonda Imithetho Yogcino - lwazi EIreland

I-Ireland lilungu le-European Union kwaye ngoko iphantsi ngokupheleleyo kwe- Jikelele ukhuselo logcino-lwazi olukhuselayo (GDPR). I-GDPR yenye yezona zicwangciso zogcino-lwazi ezingqongqo ehlabathini, kwaye isebenza nakweyiphi na intlangano eqhuba ugcino-lwazi lwabantu ngabanye kwi-EU, kungakhathaliseki ukuba umbutho ngokwawo usekelwe phi. Xa inkampani ingekho zinjongo kwiqabane le-Ireland, zombini umlawuli wedata (inkampani yakho) kunye neenkqubo zogcino-lwazi (umnikezeli we-data) kufuneka zihambisane neemfuno zeGDPR.

I-Ireland ikwamisele uMthetho we- Wokukhusela u-2018, owengezelelayo kwi-GDPR kwaye umisela i-Irish yoKhuselo lwe-DT Data Commission (DPC) njengegunya lesizwe. I-DPC inamandla okuhlola, ukuhlawulisa iintengiso ukuya kwizigidi ezingamashumi amabini okanye 4% zojikelezonyaka wonyaka wonke (ezizinyuke kakhulu), kwaye kwanokuvalwa kwemisebenzi yokulungisa ugcino-lwazi olukhethekileyo. i-DPPC ayiyo ibhale ingxelo entle kwinkampani enkulu yobugcisa kwiminyaka yakutshanje. Ngoko ke, naliphi naliphi ilungiselelo lobuqu elibandakanya ugcino-lwazi lwehlabathi lwe-GDPDP limele liqalise ngolwalamano oluthe ngqo nolwalamano lwe-GDR.

Imigaqo engundoqo yeGDPR yokukhupha impembelelo

  • [[UMTL:0] Ukungabikho semthethweni, okusesikweni, nokubonakala ngaphaya: Imixholo yogcino-lwazi kufuneka yaziswe ngendlela ii-data zabo eziza kuphunyezwa ngayo kwaye kube kutheni.
  • Umlinganiselo: Ugcino-lwazi lungaqokelelwa kuphela ukwenzela iinjongo ezichaziweyo, ezicacileyo nezisemthethweni.
  • [[FLT: 0] Ukunciphisa iData: kuphela umlinganiselo omncinci wogcino-lwazi lobuqu ofunekayo kwinkonzo yokukhupha isantya senqanawa kufuneka yabelwene.
  • Accuritation: Ugcino-lwazi kufuneka lugcinwe luchanekile kwaye lude lufike kumhla.
  • Umlinganiselo: Ugcino-lwazi kufuneka lugcinwe kuphela ukuba kuyimfuneko ukwenza injongo.
  • Ubuchule kunye nomlinganiselo wobuququ kufuneka ube kwindawo.
  • Ubalo-mali: Umlawuli wogcino-lwazi unoxanduva lokubonakalisa ukuthobela yonke imigaqo.

Ukukhupha isantya ngokukhethekileyo, i-GDPR ichaza imfuneko efunekayo yomthetho wogcino-lwazi lobuqu ukwenzela i- Isivumelwano sokuqhubekisa i-DPA [DFLT:1] phakathi komlawuli kunye nomququzeleli. Le DPA kufuneka ichaze umba wesihloko, ixesha, indalo, kunye nenjongo yokulungisa, iindidi zogcino-lwazi lobuqu, iindidi zeemfuno zomlawuli, kunye neemfuno kunye namalungelo omlawuli. Umqhubekekisi angayiqhuba kuphela imiyalelo eqinisekisiweyo kwimiyalelo eqinisekiswe ngezibophelelo ze-mfihlo.

Amanyathelo Angundoqo Okukhusela Ugcino - lwazi Lobuqu

Isimilo Sifaneleke Ngokupheleleyo

Phambi kokusayina nayiphi na isivumelwano, qwalasela i-arhente ejongene nokhuseleko logcino-lwazi. Ukucela uxwebhu olufana neziqinisekiso zabo ze-GDPR zokugunyazisa ukuthobela i-data, iinkqubo zokhuseleko, izicwangciso zeziganeko, kunye neengxelo zemisebenzi yokulungiselela (ROPA). Yikhethe imbali yabo nge-DPC okanye abanye abalawuli, kwaye ubuze iimbekiselo kubaxhasi abakhoyo. Ukutyelela indawo okanye uhlolo lokhuseleko lwenyani lungatyhila izithintelo ezikhoyo zomzimba nezinengqiqo ezinokuthi ziphoswe yi-Awa.

Xa uvavanya abanikezeli base-Irish, khangela iziqinisekiso ezifana ne- ISO/IEC 2701 (ulawulo lokhuseleko lolwazi) okanye ISO/IEC 27701 [ulawulo lolwazi lobuhlanga] [ulawulo lwe-FLT:3]. Ezi ziqinisekiso zibonakalisa ubophelelo kuqheliselo olungcono lwezizwe ngezizwe ngezizwe. Ukongeza, ukuqinisekisa ukuba umnikezeli umisele igosa-data yoKhuselo (DPO) ukuba ufuna iGDPR (ARGQUR 37). Ukuba ayinyanzelwanga, i-DPO yisibonisi esiqinileyo solwazi oluthe kratya.

2. Izivumelwano zogcino-lwazi lohlobo lobuchule

Isivumelwano esibhaliweyo i-DPA iyimfuneko esemthethweni, hayi ukhetho. Kufuneka ihambe ngaphaya kolwimi oluchaphazelekayo kwaye iquke iinkcukacha ezithile malunga nemisebenzi yokulungisa, iimilinganiselo zokhuseleko, izicwangciso ezisezantsi ze data zokwazisa, iilayini zexesha lokwazisa, ugcino-lwazi kunye neenkqubo zokucima, amalungelo ophicotho-zincwadi, kunye netyala lokwaphula ugcino-lwazi. Qinisekisa ukuba i DPA ecacileyo izakusebenza kuphela kwimiyalelo yakho ebhaliweyo kwaye ayizukusebenzisa ugcino-lwazi nayiphi na enye injongo ngaphandle kokunikeza inkonzo ekhutshiweyo.

Phantsi kwe GDPR, umqhubekekisi-nkqubo makangangenisi omnye umququzeleli ngaphandle kogunyaziso olukhethekileyo okanye olubhaliweyo jikelele kumlawuli. Ukuba ugunyaziso jikelele lunikiwe, umqhubekekisi kufuneka akwazise naluphi na utshintsho olucetyiweyo kwaye akuvumele ukuba unikezele. I DPA kufuneka ibonise olu lawulo. Abanikezeli abaninzi base-Ireland basebenzisa iiregijini ezisesikweni (SCCC) ukwenzela amalungiselelo anjalo, kodwa iqela lakho elisemthethweni kufuneka lizihlole ukuqinisekisa ukuba zihambisana nomnqweno wakho womngcipheko.

3. Imida yokufikelela kogcino-lwazi kubasebenzi ababalulekileyo

Ubalo logcino-lwazi lusebenza kungekuphela nje kubungakanani bogcino-lwazi olugqithisiweyo kodwa kolunokufikelela kulo. Ukuzalisekisa indima yendima wapilogate (RBAC) ukwenzela ukuba kuphela abasebenzi beqabane elikhuphayo elinomsebenzi osemthethweni abafuna iprojekti babonise okanye baqhube idata yobuqu. Sebenzisa iindlela zokuqinisekisa ezomeleleyo, ezifana noqinisekiso oluninzi (MFA), kwaye ugcine iziqinisekiso zayo yonke imigudu yokufikelela.

Ukuba inkonzo engaphandle ibandakanya inkxaso yabathengi, qinisekisa ukuba abasebenzi abanako ukubona iinkcukacha ezipheleleyo okanye ezinye iinkcukacha ezichukumisekayo ngaphandle kokuba zifunwa ngokupheleleyo. Ubugcisa obufana nokugquma i-data okanye umqondiso womqondiso bungathatha indawo yogcino-lwazi lokwenene ngamaxabiso okwenene kodwa angachukumisekiyo kwimisebenzi emininzi esebenzayo.

4. Khowuda ugcino-lwazi xa uphumlile naxa udluliswa

Ukukhowuda yenye yezona ndlela zobuchule zokukhusela ugcino-lwazi lobuqu. Yonke idata yobuqu esasazwe phakathi kombutho wakho kunye nomntu osebenza kunye nowase-Ireland ogqitha iqabane kunye nayiphi na i-ecuntswana elisezantsi kwe-protocol — kufuneka ibhalwe ngokufihlakeleyo isebenzisa iprotocol enamandla njenge TLS 1. Idata egcinwe kwiiseva, iidatabase, okanye inkxaso kufuneka ibhalwe ngokufihlakeleyo usebenzisa i AESprendam256 okanye into elinganayo. Isitshixo sokukhowuda kufuneka siphathwele ngokwahlukileyo kugcino-lwazi olufihlakeleyo, ngokufanelekileyo kwimodyuli ye-emodyuli (HSM) okanye kulawulo lwezitshixo olusezantsi lwezitshixo.

Qinisekisa iqabane elikhuphayo libhalise imigaqo yokuguqulela ebhalisiweyo kwaye lingabonisa ukuhambelana nemigangatho yoshishino. Ukuba umnikezeli usebenzisa izibonelelo zamafu asuka kubanikezeli abanjenge AWS, Microsoft Azure, okanye iCcucu eGoogle (zonke zineendawo ezinkulu zogcino-lwazi eIreland), qinisekisa ukuba ukuguqulela ngokufihlakeleyo . Iinkampani ezininzi zase-Ireland zinikezela ngezikhombisi eziphezulu kakhulu; i DPA yakho kufuneka icacise ukuba ngubani obamba izitshixo ezinkulu nendlela ujikelezo lwesitshixo oluphethwe ngayo.

5. Uvavanyo loNyaka noLolongo

Inzondelelo elindelekileyo asisosiganeko esinye esikwi-66 sexesha. Yakha amalungelo ophicotho-zincwadi kwiDPA yakho kwaye ucwangcise uhlolo lwexesha ngamaxesha — ubuncinane ngonyaka — lolawulo lokhuseleko lweqabane lakho. Ezi mpendulo zinokwenziwa liqela lakho langaphakathi lophicotho-zincwadi, iqela lesithathu elizimeleyo, okanye ngeqhinga elibonakalayo. Kufuneka umnikezi-mali agunyazise ukuvavanywa okuthe rhoqo kwenkqubo, iinkqubo zekhompyutha, kunye neezicelo ezilawula ugcino-lwazi lwakho, kwaye acele ukushwankanyiselwa kweengxelo zophando kunye namaqhinga okulungisa.

Ukongeza, khuthaza iqabane ukuba lifumane Impembelelo yokhuselo lwe-DPIA [DIA] ukwenzela imisebenzi ethile yokulungiselela oyiphumeleyo. Ngoxa umlawuli ehlala enetyala, i-PPIA yelungu ingabona ubungozi kwangoko kwaye ikhuphe amanyathelo oxwebhu. I-ICO kunye ne-DPC zombini zipapasha iisikhokelo kunye nokhokelo lokuziphatha okuziqhuba njenge-DES; ukwabelana nezi zinto nomnikezeli wakho kungaqinisekisa ukufikelela okuzinzileyo.

Owona mceli ulungileyo wokhuseleko logcino-lwazi kwimisebenzi

Uzalisekiso lokhuseleko lwenethwekhi olunamandla

Qiniseka ukuba iqabane elikhuphayo lisebenzisa ii-flareats, ukufumanisa/ukukhupha izithuba ezisemzimbeni, kunye nee-applys ezikhuselekileyo zofikelelo olukude. Ii-intanethi ze-Swebregate ukuze ugcino-lwazi lwakho lwahluke kwezinye ii-data zomxhasi. Oku kunokufunyanwa ngamafu afihlakeleyo okanye izibonelelo ezinikezelweyo. Ukuba umnikezi unika indawo eyabelweneyo, uqinisekisa ukuba ukungabikho kolwazi olunengqiqo kusendaweni ukunqanda ukuvuza kogcino-lwazi olunee-partramentine.

Gcina i-software kunye neenkqubo zihlaziywe

I-software engaphandle yindawo eqhelekileyo yokungena yabahlaseli. I-DPA yakho kufuneka ifune iqabane lakho ukugcina inkqubo yolawulo lobungozi equka ukuvalwa kwenkqubo zokusebenza, izicelo, kunye namathala eencwadi esithathu angaphandle. Lungela amathemba ezinto ezinzima eziza kusetyenziswa kwifreyim echaziweyo (umz. 48-72 yeeyure) kunye nee-obthi ezingeyo-2009 ezibonisa ukuchanabeka okuzakusetyenziswa kumjikelo wenyanga. Uvavanyo oluthe rhoqo olunengxelo ye-oyile-oyile lunganceda amaqela omabini ahlale elwazi ngemi yangoku.

Uqeqesho Lomqeqeshi Osebenza Kukhuseleko Logcino-lwazi

Imposiso yomntu ihlala yenye yoonobangela abaphambili bokwaphuka kogcino-lwazi. Iqabane elisebenzisa i-data kufuneka linikezele rhoqo, indima elungele ukukhuselwa ngogcino-lwazi kubo bonke abasebenzi abaphatha i-data yobuqu. Imixholo yoqeqesho kufuneka iquke uphando olukhuselekileyo lokuphatha ugcino-lwazi, ukucoceka, ukuchaza iinkqubo zokwaphulwa komcimo, nokubaluleka kwemigaqo yedata yokuncitshiswa koqeqesho kunye nomlinganiselo wenjongo.

Misa imithetho yemithetho yokuphendula

Ngaphandle kwemigudu engcono, unikezelo lusenokwenzeka. I DPA izakuchaza imigca ecacileyo yexesha lolwaphuko lwesaziso: phantsi kwe GDPR, umqhubekekisi makazise umphathi ngaphandle kokulibazisa okungafanelekanga emva kokwazi ukwaphulwa kogcino-lwazi lobuqu. Inkampani yakho, njengomlawuli, ineeyure ezingama-77 ukwazisa i DPC ngaphandle kokuba uphazamiso aluqhelekanga ukuba nesiphumo sobungozi kubantu ngabanye. Qinisekisa ukuba umnikezeli unecebo lesiganeko eliquka ukuqulatha, uphando lwento, unxibelelwano olucwangcisiweyo ngenqaku lakho loqhakamshelwano, kunye namanyathelo okulungisa. Chumeza itafile neqabane lakho eliphezulu kanye ukuvavanyaza ukuphumelela.

Ulwazelelelo Olokugqibela Lokuphuma Kweentlondi

Ukudlulisa ugcino-lwazi lweBorder kunye noTreexit

Ngenxa yokuba iRiphabliki yase-Ireland ihlala ikwi-EU, ukudluliselwa kogcino-lwazi kwinkampani yakho ukuya kumntu wase-Ireland yi-intra hieu yaye akufuni buchule bokudlulisa obungakumbi (njengomgangatho osezantsi ka-Claus). Noko ke, ukuba i-Ireland isebenzisa i-mini engaphantsi kwe-620% engaphandle kwe-Europe Economic Areace (EA), kufuneka uqinisekise ukuba ukhuseleko olwaneleyo lusendaweni yayo nayiphi na indawo phambili. Oku kuyimfuneko ngokukodwa kwiinkampani ezixhomekeke kwi-Irish.Ilish systcomssss ezixhasa amaqela eIndiya, ePhilippines, okanye eUnited States. Ifuna iqabane ukuba ligcine uluhlu lwazo zonke ii-ecectivess kunye kunye noluqulucation ezisemthethweni zokufuduswa.

Emva kwe-Breits, i-Northern Ireland ihlala ilungelelaniswe ne-GDPR kwiinkalo ezithile, kodwa yahlukile ngokwezolawulo. Ukuba ilungiselelo lakho lokukhupha idata libandakanya ukusetyenziswa komda phakathi kwe-Ireland ne-Ireland, jonga icebiso lomthetho ukuze ubone enoba kufuneka inkxaso eyongezelelekileyo kusini na.

Sebenzisa iMithetho yeKhompyutha (BCR)

Ukuba inkampani yakho iyinxalenye yeqela lezizwe ngezizwe kwaye iqabane eliphumayo e-Ireland liyilungu lesivumelwano, ungacinga ukuzalisekisa imithetho yeKhorpotate yoLawulo lwe-Corporate (BCR) yabaqhubekekisi. Ii-CR zikhowudi zangaphakathi zehambo evunyiweyo ligunya lokhuseleko logcino-lwazi lwaseYurophu elivumela ukudluliswa kweqela logcino-lwazi lobuqu ngaphandle kwezivumelwano ezisemthethweni. Ngelixesha inkqubo yogunyaziso inokuthi ithathe iinyanga, ii-BCRCR inike isakhiwo esibanzi sogcino-lwazi ukukhusela umbutho ngaphaya kombutho kwaye ingenza lula ukuthunyelwa okuqhubekayo kweenkonzo zenkxaso engaphandle kweqela.

I-DPO yokhuseleko logcino-lwazi (DPO)

Nokuba ngaba inkampani yakho iyafuneka okanye akunjalo ukumisela i-DPO, ebandakanya i-DPO kwangoko kwinkqubo yokukhupha i-DPO yongeza uphando olubalulekileyo. I-DPO ingahlola i-DPA, icebise i-DPA, ijonge ukuthobela okuqhubekayo. Abanikezeli abaninzi base-Ireland bane-DPO yabo; ukuseka isiqhagamshelanisi sonxibelelwano esithe ngqo phakathi kwe-DPO yakho kunye ne-oooralss zinceda ukucombulula ngokukhawuleza imicimbi yangasese nokuqinisekisa ukucaciswa okungaguquguqukiyo kweemfuno ze-GDPR.

Ingqondo kunye nokungaphumeleli

Izivumelwano zokukhupha isiqinisekiso zisoloko zibuyiselwa ngokuzenzekelayo, zikhokelela kugcino-lwazi olugcinwe ixesha elide kunemfuneko. Chaza kwi DPA ixesha elichanekileyo lokuzigcina kwakhona udidi ngalunye lwe data yobuqu, kwaye ifuna umnikezeli ukuzalisekisa ubuchule bokukhupha obuzenzekelayo okanye ukubuyisela okanye ukucima idata kwisicelo sakho xa ugqitywe. Ukufumana isatifiketi sokucimeka xa inkqubo igqityiwe. Oku akunciphisi umngcipheko kuphela kodwa kwakhona kuxhasa ucwangciso lwakho lwenjongo yogcino-lwazi olufunekayo phantsi kwe GDPR.

Isiphelo

Ukukhusela ugcino-lwazi lobuqu ngexesha loshishino lwe-Ireland akuyonkqubo esemthethweni nje kuphela — kungunobangela ongundoqo wokuthembana nokusebenza. Ngokuqonda iimfanelo ze-GDPR ezilawula abalawuli kunye nabaququzeleli, ziqhuba inzondelelo epheleleyo, zimisela iMithetho yogcino-lwazi ebanzi, kwaye ziphumeze iinkqubo zokhuseleko eziqinileyo kwimisebenzi yemihla ngemihla, iinkampani zingayinciphisa ngokuphawulekayo ingozi yokwaphula ulwazi kunye nezigwebo ezilawulayo. Iingcebiso ezichazwe kweli nqaku zinikela isiseko esiqinileyo, kodwa ibala logcino-data lisoloko lijikeleza. Zihlale zisazisiwe ngokuhlaziya okuvela kwi-Irish Detection Projective Projectyisis Comment kunye ne-Thelitection Board yaseYurophu, kwaye ziphinda zinciphise amalungiselelo akho okuqinisekisa ukuba zihlala zikho.

Ekugqibeleni, ukukhuselwa kolwalamano olukhuselekileyo kunceda wonke umntu: ugcino-lwazi lwabathengi bakho luhlala lukhuselekile, inkampani yakho iphepha umonakalo ongokwasemthethweni nokwemali, kwaye iqabane lakho lase-Ireland linedume lokuthembeka nelokuqala inkonzo yasese. Zinike ixesha ngoku lokuhlola izivumelwano zakho ezikhoyo kunye nokhuseleko — ukuveliswa kogcino-lwazi kuncinane kakhulu kunexabiso lokuchana.

[[UMTL] izibonelelo ze-External: