Isizathu sokuba Ukukhuselwa kogcino-lwazi kuyimfuneko esemthethweni phantsi kweGDPR

Ngaphantsi kwe-Irland i-DDPR yoKhuselo-lwazi Jikelele (DPR), nawuphi na umsebenzi wokulungisa onokuba negalelo kumngcipheko omkhulu kumalungelo kunye nenkululeko yabantu bemvelo ufuna i-data yokhuselo lwe-Asstyment (DPIA). IKhomishini yoKhuselo logcino-lwazi (DPC) inyanzelisa ngokucacileyo le mbopheleleko, kwaye ukungaphumeleli ukuqhuba i-DEP apho umntu anokukhokelela kwinkokhelo elawulayo ukuya kutsho kwizigidi ezilishumi okanye 2% yokujika kwaminyaka lehlabathi, engaphezulu, ekwayiyo. I-A ayiyo inkqubo ecwangcileyo ekuncedayo ukwazi, ukuqwalasela, ukuqwalasela, nokubeka imicimbi yakho yobuqu ngaphambi kokuba umsebenzi uphile. Ukukhusela kogcino-lwazi oluzinzileyo nokungamiselwangagqibeleliyo, kodwa kwaneemfuneko zokuthembeka ezisemthethweni, kodwa nangakhiwangakhiwangabo basebenzi, kunye nabaqeshine-ofisi.

Le ndlela ihamba kumgangatho wonke wokuqhuba i-PICA e-Ireland, ukufumanisa ukuba ubani uyafuneka kusini na ukubhala oko akufumanileyo nokugcina uhlolo lwakho ixesha. Inyathelo ngalinye liquka imizekelo esebenzisekayo, iimbekiselo kukhokelo olufanelekileyo olusuka kwi-DPC, kunye necebiso lokuphepha imigibe eqhelekileyo.

Ufanele Uyiphathe Nini I - DPI EIreland?

IGDPR kunye noMthetho woKhuselo lweData 2018 (Uthutho lwama-84 kunye neCandelo 86) yenza i-PIDA ibe yeyona ifanelekileyo xa inkqubo inokuba neziphumo zomngcipheko ophezulu. NgokweGatya 35 yeGDPR, kufuneka wenze i-DPIA ukwenzela uqhubekeko olubandakanya:

  • Ukusetyenziswa nokukhutshwa kwabantu abaneziphumo ezingokwasemthethweni okanye ezifanayo eziphawulekayo.
  • Ukuqokelelwa kweendidi ezikhethekileyo zogcino-lwazi (umz., impilo, ibhayoloji, iimbono zobupolitika) okanye inkcazelo yobuqu enxulumene neenkolelo zolwaphulo-mthetho ngomlinganiselo omkhulu.
  • Ukuhlolwa kwenkqubo yendawo ekufumaneka kuyo ekuhleni ngesikali esikhulu (umz. CCTV kumbindi wesixeko).

I-DPC ipapashe “uluhlu olupheleleyo lokuqhubekeka-phambili” lomsebenzi osoloko ufuna i-PICA, kuquka ukusetyenziswa kobugcisa obutsha bokulandelela indlela yokuziphatha, ukulungelelaniswa kogcino-lwazi lwabantwana lokuthengisa okanye lokukhupha, kunye nokuqhubekeka komlinganiselo omkhulu we-data yendawo. Ungafumana uluhlu olupheleleyo ku- ulawulo lwe-DPC olusemthethweni lwe-DP [P] iphepha le-DEP elinolwazi olusezantsi [. Ukuba umsebenzi wakho awuweleli kwenye yezi mpawu, kufuneka uqhube uvavanyo lwe-screctorous uvavanyo lomngcipheko; ukuba uphinda uhlale umingcipheka ngokuphezulu emva kovavanyo lwakho lokuqala, u-DECA iyimfuneko.

Inyathelo-ngeNdlela yeKhokelo yokuHlasela u-DPI

Inyathelo 1: Chaza uqhubekeko logcino-lwazi ngokweenkcukacha

Qala ngoku bhala indalo, umlinganiselo, umongo, neenjongo zoqhubekeko. Oku sisiseko se DPI yakho iphela. Ngaphandle kwenkcazelo ecacileyo, awunakuqwalasela ngokuchanekileyo umngcipheko okanye uchonge umlinganiselo ofanelekileyo wokulinganisela.

[[UMTL:0] Into emayiqukwe:

  • Ukwenziwa koqhubekeko: Chaza uhlobo lomsebenzi (uqokelelo, ukushicilela, ukugcina, usetyenziso, ukususa, njl.njl.) kunye nobugcisa obubandakanyekileyo (iplatfomu, imodeli ye-II, inkqubo ye-CRM, njl.njl.).
  • [[FLT: 0]Specieti: Chaza umthamo wogcino-lwazi (unani lwemixholo yogcino-lwazi, iindidi ze data, ukuphindeka koqhubekeko, amaxesha okubuyisela inkumbulo).
  • [[UMTLL:0] com: Chaza ulwalamano phakathi kombutho wakho kunye nemixholo yogcino-lwazi (umqeshwa, umqeshwa, umguli, njalo njalo) kunye nayo nayiphi na imeko engaphandle (umz., imimiselo yoshishino, ulwaphuko logcino-lwazi olungokwembali).
  • [[UMTL: 0] Imposiso: irejista yenjongo yeshishini ethile yenzelwe ukufezekisa, kwaye ichaze indlela uqhubekeko olufak' isandla ngayo kulo msebenzi.
  • Yenza umzobo woqukuqelo lwe drat: Yenza umelo olubonakalayo olubonisa apho ugcino-lwazi luvela khona, indlela oluhamba ngayo kwiinkqubo zakho, apho lugcinwa khona, onokuthi abekho, kunye nabaphi na abangenisi becandelo lesithathu ababandakanyekileyo. Oku kuyimfuneko ukuba imibutho emininzi itsibe, kodwa kubalulekile kulwahlulelo lwamva lomngcipheko.

Umzekelo: Ukuba usebenzisa inkqubo entsha yokuhlola abasebenzi, chaza uhlobo logcino-lwazi oluqokelelwe (iikhilokhwe, iscreenshot, imilinganiso yemveliso), inani labasebenzi abachaphazelekayo, nenjongo (ukubonakalisa ukuphumelela). Thetha ngomongo(_abaqeshwa bakwindawo yokuxhomekeka, enyusa umngcipheko.

Inyathelo lesi-2: Ihlolisisa imfuneko nophuhliso lokulungelelanisa

Xa unomfanekiso ocacileyo wolungiso, kufuneka uthethelele isizathu sokuba kuyimfuneko kwaye kutheni indlela encinci ephazamisayo ingenakuphumeza injongo enye. Eli nyathelo lidityaniswe ngqo nomgaqo we GDPR wokunciphisa ugcino-lwazi (Artle 5(1)(c) nomgaqo wokuziphendulela.

Isitshixo semibuzo yempendulo:

  • Ngaba injongo ingaphunyezwa ngaphandle kokuqokelela inkcazelo yobuqu?
  • Ukuba i-data yakho iyimfuneko, ingaqokelela idata encinci? (umz., sebenzisa ugcino-lwazi olugqwethekileyo okanye olungophiyo endaweni yabachongi abathe ngqo)
  • Ngaba ukulungiselela kuhambelana nenjongo? (umz., ingeniso encinane yemveliso ayikuthetheleli ukujongwa okuqhubekayo kwevidiyo kwabo bonke abasebenzi)
  • Ngaba ukhe wacinga ngobugcisa obunye okanye ukukhutshwa komsebenzi okuziingozi ezincinane zobumfihlelo?

Xhoba indlela oqiqa ngayo kunye nezisombululo ozichasileyo, ngobulungisa ngesizathu sokuba indlela oyikhethileyo ingeyiyo indlela encinane yokuziphikisa ekwakusafikelelwa kwiinjongo zakho. Le ngxelo iyakuba yeyona ibalulekileyo ukuba iDPC ikhe ihlolisise ukuthobela kwakho.

Inyathelo lesi-3: Yazi Iingozi Zogcino-lwazi

Ukwaziwa kwengozi yintliziyo ye-PICA. Kufuneka uqwalasele ngokucwangcisiweyo yonke iziphumo ezibi kumalungelo nenkululeko yabantu. Qwalasela ubungozi obunxulumene nento yobuqu kunye nengozi ebanzi efana nokulahlekelwa yimali, ukonakaliswa kodumo, ucalucalulo, okanye umonakalo ongomzimba.

[[UMTL:0] Indidi zobungozi emaziqwalaselwe:

  • [[UMTL: 0] Ii-routs zolawulo kugcino-lwazi lobuqu: Ugcino-lwazi lungafunyanwa ngamaqela angagunyaziswanga, abelane ngaphandle kwemvume, okanye asetyenziselwa iinjongo ezingekaxelelwanga ngemibandela yogcino-lwazi.
  • [[UMTL: 0] Ucalucalulo okanye unyango olungalunganga: ukufutha okanye ukwenza izigqibo ezizenzekelayo kungakhokelela kwiziphumo ezisukrutyekileyo, ingakumbi kumaqela abuthathaka.
  • Ukuba okanye ukuqhatha: Ingqokelela yemikrozo eyodwa (umz., amanani ePPS, iinkcukacha zepasi yokundwendwela) zinyusa umngcipheko wokufakelwa.
  • Ingozi yemali: uphulelo logcino-lwazi lungakhokelela kumaxabiso kwimixholo yogcino-lwazi, efana nokuhlola ukutyala okanye ukulahlekelwa zinzuzo.
  • Umonakalo okhoyo womonakalo we-Reput: Isivalo solwazi lobuqu olunovakalelo (umz., iirekhodi zempilo, imbonakalo yesondo) zinokubangela ihlazo entlalweni.

Kwingozi nganye, qwalasela ukunokwenzeka kwayo (ngokunokwenzeka, okunokwenzeka, okunokwenzeka, kunokwenzeka kakhulu) kunye nobukhali (okanye obuphakathi, obunzulu, obunzulu) ukwenza ireyithingi yomngcipheko. Sebenzisa imaphu yobushushu okanye i-matrix elula. Ukuqhelisa, i-DPC ilindele ukuba uqwalasele isicwangciso esibi kakhulu, hayi nje esilindelekileyo.

Kukwacetyiswa ukukhangela ukhokelo lwe-PICOS ukwenzela isikhokelo sohlolo lomngcipheko kunye nemizekelo edityaniswe nemigangatho ye-EU.

Inyathelo lesi-4: Zazi Iindlela Zokusebenzisa Iingozi Ezibangelwa Zizigalo

Kubungozi obubuchongileyo, chaza ulawulo olungqalileyo oluza kuzisa umngcipheko oza kuphinde uvele phantsi kumgangatho owamkelekileyo. Izilawuli zingaba zezobugcisa, zombutho, okanye ezisemthethweni kwindalo. Injongo kukuhlisa zombini ubungozi nobunzima bomngcipheko ngamnye.

Amanyathelo okulinganisela:

  • [[UMTL:0] Iteknoloji: Ukukhowuda xa uphumle naxa uhanjiswa, ulawulo lokufikelela (usekelwe, ubuncinane ilungelo), ukwenziwa kwamagama afihlakeleyo okanye ukwenziwa kwempazamo, ukugawulwa nokujongwa, iinkqubo zokususa ugcino-lwazi ezizenzekelayo.
  • Ukulungiselela: uqeqesho lomsebenzi, iinkqubo kunye neenkqubo zobumfihlo, ukuphatha izivumelwano zogcino-lwazi namaqela esithathu, izicwangciso zeziganeko.
  • [[UMTL: 0] Imithetho/isivumelwano: Izivumelwano zogcino-lwazi ezicwangcisayo (DPAs) nabaqhubekekisi, ukhuselo logcino-lwazi lweziphumo zesivumelwano sorhwebo, uhlolo lokhuselo logcino-lwazi olunyanzelekileyo (DPO).

Emva kokusebenzisa ulawulo, hlolisisa umlinganiselo womngcipheko. Ukuba umngcipheko okhoyo uhlala uphezulu” okanye “uphakathi” kumongo apho ubunzulu bunzima, kufuneka ujonge i-DPC phambi kokuba uqale ukwenziwa. Inqaku le-GDPR lifuna ukhangelo lwangaphambili nanini na i-DECA ibonisa ukuba ukuqhubekeka kuya kuphumela kwingozi enkulu xa kungekho manyathelo athatyathwayo ukuze unciphise. I-DPC izakuhlola i-DPPC yakho kwaye ingafuna iinguqulelo okanye ide inqande ukwenziwa kwayo.

Uxwebhu lwengozi nganye kunye nobuchule bayo kwitheyipu ecwangcisiweyo. Indlela ecacileyo yenza kube lula ngabahloli (kuquka neDPC) ukuqonda indlela ocinga ngayo.

Inyathelo 5: Khangela abaxhasi abafanelekileyo

I-PICA asiyonto idlalwayo. Inqaku le-GDPR 35(9) ngokucacileyo lifuna ukuba ufune iimbono zemibandela yogcino-lwazi okanye abameli bazo kulungiselelo olucetyiweyo, ngaphandle kokuba ilingana nenani lezihloko zedata, ubudala, okanye ezinye izinto. Oku kunokwenziwa ngophando, amaqela agxininise, okanye uthethane nomanyano lorhwebo okanye amabhunga asebenza.

Kufuneka uquke igosa lakho lokhuselo logcino-lwazi (DPO) ukuba unomntu omnye. I-DPO kufuneka yabelwe kwi-DPIA ukususela ekuqaleni kwaye ifikelele ngqo kubaphathi abakhulu. EIreland, imibutho emininzi imisa iDPO engaphandle, kwaye loo mntu kufuneka aqukwe kwinkqubo yokuhlola.

Abanye abachaphazelekayo abafanele baqwalasele oku:

  • Abalawuli abasemthethweni (ingakumbi ukuba ukwenziwa kwenqanawa kubandakanya iindidi ezikhethekileyo okanye ukwenza izigqibo ezizenzekelayo).
  • ISEBE LENTSHONA KOLONI
  • Abanini bamashishini nabaphathi beeprojekthi.
  • Ingcebiso yeNkcubeko yeNtshona Koloni.
  • Apho ziyimfuneko, inxenye yesithathu yenkqubela-phambili ezakuphatha ugcino-lwazi.

Uxwebhu olubonisa ukuba i-PIA yokugqibela iphenjelelwa njani. Oku kubonisa ukuba inyanisile kwaye imele iphendule.

Inyathelo 6: Uxwebhu kwaye ugcine u- DPIA

Ingxelo yokugqibela ye DPI luxwebhu oluphilayo, hayi icwecwe elithe nkqo. Kufuneka iquke:

  • Isishwankathelo esiphetheyo sokwenziwa kunye nomngcipheko ongundoqo.
  • Inkcazo epheleleyo yokuqhubekeka (Inyathelo 1).
  • Imfuneko nohlalutyo lolungelelwano (Inyathelo 2).
  • Imatrikhi yovavanyo ephawulweyo enomngcipheko kunye nomlinganiselo (Inyathelo 3).
  • Umlinganiselo wokukhupha imitha kunye nomgangatho womngcipheko ongapheliyo (Inyathelo 4).
  • Ingxelo yohlolo lwabasebenzi ababotshelelweyo (Inyathelo 5).
  • Isiphelo – ukuba ingaqhubekeka kusini na, kwaye ukuba kufuneka uxilongo lwangaphambili.
  • Usayino nomhla othathwe kwiDPO (ukuba imisiwe) kunye nolawulo lomlawuli wedata.

Xa i DPI ityikitywe, kufuneka ujonge uqhubekeko. Naluphi na utshintsho kwindalo, umda, umongo, okanye injongo yoqhubekeko - olufana nokwazisa imvelaphi entsha yogcino-lwazi, ukutshintsha umnikezeli wamafu, okanye ukwandisa iindidi zemixholo ye data – ibangela uhlolo lwe DPIA. I DPC icebisa ukuba uhlolo ngalunye ubuncinane ngonyaka, okanye rhoqo ukuba umlinganiselo womngcipheko uphezulu.

Gcina i DPI ngokukhuselekileyo kwaye yenza ifumaneke kwi DPC xa ucela. Phantsi komgaqo wokuphendula, kufuneka ukwazi ukubonisa ukuba uqhuba i DPIA kakuhle phambi kokuba uqhubekeko luqalile. Musa ukulindela ulwaphuko lwe data ukuthethelela uxwebhu lwakho.

Iimpazamo Eziqhelekileyo Omele Uziphephe

Kwanemibutho enamava iwela kwiziphazamiso xa iqhuba i DPI njenge. Lumkela ezi mpazamo ziqhelekileyo:

  • [[NTL: 0] ikhupha i DPIA njenge syndrome: A DPI ayiyi “yi-drom” – kufuneka ihlaziywe njengoko inkqubo iguquka.
  • [[UMTL:0] Ukukhawuleza ukubandakanya imixholo yogcino-lwazi: Ukutsiba uxilongo kuba kubonakala kuphazamisa kunokuthi kukhokelele ekungathembini nasekungaqwalaselweni.
  • Iphaphazamisa icandelo lesithathu lenkqubo: Ukuba ukhupha uqhubekeko lwemvelaphi yogcino-lwazi, usathwala uxanduva olupheleleyo lwe DPIA kwaye kufuneka uqinisekise ukuba abaqhubekeki bakho bayavumelana.
  • [[Ulwimi:0] ngaphaya kobuchule bolwimi: i- DPIA kufuneka iqondwe kubagcini-mathiriyeli abangasebenzisanga ubugcisa, kuquka i DPO yakho kwaye i-DPC. Bhala ngokucacileyo kwaye uphephe umbhobho.
  • Awusebenzisi indlela yolwazi olucwangcisiweyo: Ingxelo ekhululekileyo kunzima ukuqwalasela nokuphicotha. Sebenzisa isikhokelo esilandela isakhiwo esicetyisiweyo se-DPC (okanye sebenzisa uluhlu lwemiqathango evela kwinqaku le-35 nesikhokelo se-WP248).

Izixhobo Eziluncedo Nezikhokelo

I DPC inikeza isikhokelo esikhululekileyo se DPI kwi website yabo, eyindawo entle yokuqalisa. Ukongeza, ibhodi yokhuseleko logcino-lwazi lwaseYurophu (EDPB) ipapashe izikhokelo (WP248 rev.01) eziquka uluhlu lokuhlola kunye nemigaqo yokugqiba ukuba i DPI iyimfuneko kusini na. Ungafumana ezi mpahla ngephepha Isikhokelo se-EDPB .

Kwimibutho eqhuba imiqulu emikhulu yogcino-lwazi lomntu ngamnye, i-software enikezelweyo ye-PICA inganceda ukufuduka komsebenzi, ulawulo loguqulelo, kunye nenkqubo yokuvunywa. Noko ke, kwaneprogram yokubala egcinwe kakuhle yanele ukuba ulandela amanyathelo ngokungqongqo. Isitshixo kukugqibelela nokungaguquguquki, hayi izixhobo ezidanyazayo.

Isiphumo: Ulawulo lweNkcubeko yoLawulo loLawulo loMntu

Ukuqhuba iNdlela yokuKhusela ukhuphiswano logcino-lwazi yinkqubo enyanzelekileyo ukwenzela imisebenzi emininzi yokulungiselela ugcino-lwazi eIreland, kodwa ikwasisixhobo esinamandla sokwakha umbutho ohlola ngasese. Ngokulandela amanyathelo amathandathu adweliswe kule ndlela – ukuchaza ukwenziwa, ukuvavanya nokulinganiswa, ukuchaza nokulinganisela iingozi, abagcini-mathikithi, ukubhala ngokucokisekileyo, nokugcina uhlolo ngexesha elidlulileyo – ungaqinisekisa ukuvumelana neGDPR kunye noMthetho woKhuselo logcino-lwazi lwase-Ireland 2018.

Khumbula ukuba i DPC ijonga i DPI njengophawu lokuziphendulela nolawulo olulungileyo. Alukukhuseli nje kuphela kwintengo kodwa lukwabonisa abathengi namaqabane ukuba uyithathe nzulu indawo yabo yobuqu. Qala i DPIA yakho kwangoko kwiprojekthi yokuzingisa – ngokufanelekileyo phambi kokuba nayiphi na inkqubo okanye uqokelelo logcino-lwazi luqalise – ukuquka ukhuseleko lwangasese ukusuka emhlabeni phezulu.

For further reading, refer to the DPC’s downloadable DPIA template and the ICO’s practical guidance on DPIAs, which remains highly relevant even post-Brexit due to the UK’s alignment with the original GDPR. By integrating these practices into your daily operations, you transform a legal requirement into a competitive advantage.