Ukwazisa: Isizathu Sokuba Kubaluleke Izivumelwano Zogcino - lwazi EIreland

Umbutho ngamnye ophethe i-data yobuqu eIreland, enoba ngumlawuli okanye umququzeleli, kufuneka uqhube ummandla ongqongqo omiswe ngumthetho we-European Union kunye nomthetho wasekuhlaleni. Isivumelwano se-DPA esiqhubela phambili [ asiyosivumelwano esisisibophelelo nje kuphela — sisivumelwano esibophelela imisebenzi, imida, kunye nemigaqo efunekayo xa umlawuli edibanisa inkqubo yokuphatha ugcino-lwazi lobuqu. Phantsi koMthetho we-[FT:] ISimiselo sogcino-lwazi oluthe ngqo [GR][FLT] [FLT], [FLT], esinesiphumo esinesiphumo esithe ngqo kwimeko esebenzayo, esithe ngqo kwi-EURGS, abalawuli kunye nenkqubo ekufuneka ibhalwe nakweyiphi nayiphi nayiphi nayiphi naleyo indawo elungelelayiyo. [FTT] [2018] UMthetho wokhuseleko loncedo oluthelelweyo loncedo lwemeko lwemeko oluqhelekileyo, umgaqo-RRG.G.G.G.

Isiseko Esisemthethweni SeDPAs EIreland

Isiseko sazo naziphi na iDPA eIreland siSigqeba samashumi asibhozo se-GDPR. Eli nqaku libeka umsebenzi ocacileyo, ongengowothutho kubaphathi ukusebenzisa kuphela abasebenzi abanika isiqinisekiso esaneleyo sokuzalisekisa ubuchule kunye nemilinganiselo eququzelelayo. Isivumelwano phakathi kwazo kufuneka sibe sibophelele ekubhaleni (kuquka uhlobo lwe-elektroniki) kwaye kufuneka simisele nayiphi na into engundoqo-mayela, ubude bexesha, indalo, kunye nenjongo yokusebenza, kunye nohlobo logcino-data lobuqu kunye nodidi lwemibani. I-GDPR icwangcisa uluhlu olulululawulo olululululungele ukugcinwa yi-DPA, kwaye umthetho wase-Ireland awuvumeli nayiphi nayiphi nayiphi na into enokuthi ikhuselwe ukukhuselwa.

IGDPR njengesakhelo sokuqala

I-GDPR yasebenza ngamandla ngo-25 Meyi 2018 yaza yabuyisela inkqubano yangaphambili yogcino-lwazi olukhuselayo. Umlinganiselo wayo ongaphezulu uthetha ukuba kwanabenzi bokhuseleko abamiselwe ngaphandle kwe-EU kufuneka bathobele ukuba baqhuba idata yobuqu yemibandela yogcino-lwazi ebekwe kwi-EU, kuquka i-Ireland. Inqaku leDPAs, Inqaku lama-28(3) lichaza iziqalelo ezisithoba ezibalulekileyo: imiyalelo yokulungisa, izibophelelo zemfihlo, iimfuno zokhuseleko, iimeko zokubandakanya iiprocesss, ugcino-data olunoluncedo lwamalungelo olwazi, ukuvala ugcino-data okanye ukubuyisela izibophelelo, amalungelo okuditya, kunye nolwanolwano. Naziphi naziphi naziphina ezishiya okanye ezi zidilesi ezikhoyo ezi zimeko azifaniyo nezingangeni zityhiliii ezidiza ekulandeleni.

UMthetho woKhuselo loMgaqo-nkqubo we-Irish we-CPF 2018 kunye neMithetho-

Ngeli xesha iGDPR isebenza ngqo, uMthendeleko woKhuselo loMgaqo-nkqubo 2018 ugcwalisa izithuba ezishiywe luTyelelo. IDPAS, uMthendeleko uzisa amalungiselelo afanelekileyo ngokukhethekileyo equmrhu elisebenzayo kwicandelo loluntu, ukwenzela ukulungelelanisa iindidi ezikhethekileyo zogcino-lwazi, kunye nomthetho wokwenziwa komthetho. Ikwachaza iKhomishini yoKhuselo Idata Ukhuseleko (DPC) [[FLT] [FLT]] [1] njengegunya elizimeleyo elinegunya elinobuchule obuqinileyo kunye namandla okulungisa. Icandelo 36 loMthetho, umzekelo, lilungiselela ukulungiselelwa kolwazi lobuqu kumongomo womsebenzi, kunye nabalawuli kufuneka baqinisekise ukuba nayiphi nayiphi naleyo i-DPA ifikelele ezi mfuneko ezithile zobuntu zokusasazo.

[[Uqhagamshelwano: 0] Uqhagamshelwano olungundoqo: Ikhomishini yokhuselo lokhuselo lweData – Iwebhsayithi esemthethweni

Iimfuno ezingundoqo zesivumelwano sogcino-lwazi esilungelelanisiweyo

IDPA eIreland kufuneka ibe luxwebhu oluphilayo oluthetha kungekuphela nje iimfanelo ezimileyo zamaqela kodwa kwanohlobo olunamandla lokulungisa ugcino-lwazi. Ngezantsi, ipropati nganye enyanzelekileyo ikhutshwa ngokhokelo olusebenzayo.

Umda, Injongo, kunye neMithetho

I-DPA nganye kufuneka ichaze ngokucacileyo umlinganiselo wemisebenzi yokuqhubekeka kunye nenjongo ekhethekileyo apho ugcino-lwazi luqhubekekiswe khona. Ulwimi lwe-Vague olufana “nokulungelelaniswa kogcino-lwazi olunxulumene nemisebenzi yeshishini” alwanele. Isivumelwano kufuneka sichaze iintlobo zogcino-lwazi lobuqu (umz., amagama, iinkcukacha, ulwazi lwemali), iindidi zee-data (umz., abasebenzi, iindwendwe ze-website), kunye nendlela yokusebenza (umz. uhlaziyilo, uhlaziyo, udluliso, udluliso). Umlawuli kufuneka anike uqeqesho olubhaliweyo lokuba inkqubo efunekayo ilandele, kunye nayiphi nayiphi na le miyalelo ngaphandle kolu miyalelo i-DPAPR.

Iimbopheleleko Zokhuseleko Logcino-lwazi Nemfihlelo

Omabini amaqela kufuneka achaze izibophelelo zawo zokhuseleko logcino-lwazi. Umlawuli ujongene nokuqinisekisa amanyathelo omqhubekekisi afanelekileyo, ngeli lixa umqhubekekisi kufuneka asebenzise ubuchule kunye nemilinganiselo yombutho efanelekileyo [ (ii-TOM) phantsi kweGatya 32. Oku kuquka ukuvulwa kofihlo, ulawulo lwenkohliso, kunye neenkqubo zokuphendula. I-DPA kufuneka idwelise ii-TOMS endaweni kwaye ifune ukuba umququzeli womsebenzi agcine imfihlo — ngesibopho sokuba bonke abasebenzi abafikelela kugcino-lwazi lobuqu babotshelelwe ngeenkcazelo eziyimfihlo zetyala.

Ixesha Elichithwayo, Inkumbulo Nento Ethile

I-DPA kufuneka ichaze ixesha lokudibanisa. Ekupheleni kwegama lenkonzo, umqhubekekisi kufuneka acime okanye abuyele yonke idata yobuqu kumlawuli, kukhetho lomlawuli, ngaphandle kokuba i-EU okanye i-Irish ifuna ukugcinwa kwakhona. Isivumelwano kufuneka sichaze ixesha lokususwa (umz., ngeentsuku ezingama-30 emva kokupheliswa) kunye nendlela yokucinywa (umz., ikhuseleke ngaphezulu okanye ukutshatyalaliswa ngokoqobo). Umqhubekeki wenkqubo akanakukwazi ukugcina ikopi ngokungenasiphelo ukuze akhuseleke okanye akhuseleke kwinjongo zokhuseleko ngaphandle kokuba ichazwe ngokucacileyo kwaye igwetyelwe.

Igalelo lamalungelo ogcino-lwazi noncedo

Phantsi kwe GDPR Amanqaku 12-23, imixholo yogcino-lwazi inamalungelo aquka ukufikelela, ukubuyiselwa, ukuvalela, ukuvalela, ukugqithisa, kunye nokulwa. Umqhubekekisi kufuneka ancede umlawuli ekuphenduleni ezi zicelo. I-DPA elungelelanisiweyo iza kuchaza imbopheleleko yomlawuli womsebenzi wokwazisa ngokukhawuleza xa efumana isicelo somxholo wogcino-lwazi, nokunika ulwazi olufunekayo ngexesha elivumeleneyo. Isivumelwano kufuneka simisele indlela azakuxhasa ngayo umlawuli wezixhobo ekuqhubeni iingxelo zeziphumo zeziphumo ze data (DPI njenge) ukuba kufuneka.

Amanyathelo Okhuseleko Nesaziso Sokufikelela

Ngaphandle kwee-TOM jikelele, i-DPA kufuneka iqulathe igalelo elineenkcukacha kulawulo lolwahlulo logcino-lwazi. Umququzeli kufuneka azise umlawuli ngaphandle kokulibazisa okungafanelekanga — ngokufanelekileyo phakathi kweeyure ezingama-24 ukuya kwezingama-48 — emva kokwazi ukwaphulwa kogcino-lwazi lobuqu. Isaziso kufuneka siquke uhlobo lolwaphuko, iindidi kunye nenani elithelekelelwayo lemixholo yedata kunye neengxelo ezichaphazelekayo, kwaye amanyathelo athathiweyo okanye acetyiselwe ukuhlisa umonakalo. I-DPA kufuneka kwakhona ifune umquququzeli-nkqubo ukuze igcine ilog yokwaphula nokusebenzisana ngokupheleleyo iimbopheleleko zokwazisa i-DPC kunye neengxelo zedata ezichaphazelekayo.

Izixhobo ezisezantsi zokusebenza kunye nobungqina becandelo lesithathu

Abaqhubi abaninzi baxhomekeke kulawulo olusezantsi lweqela elingu `quartics' ukugcina amafu, antistics, okanye iinkonzo zokuxhasa. I-GDPR ifuna umlawuli ukuba anike phambi okanye uluhlu oluqhelekileyo oluchanekileyo lwe-intanethi. Ukuba ugunyaziso jikelele lunikwe, umqhubekekisi kufuneka azise umlawuli walo naluphi na utshintsho olucetyiweyo kwaye avumele umphathi ukuba enze into. I-DPA kufuneka adwelise uluhlu olusezantsi lwe processionss (okanye uluhlu lwe process ezifikelelekayo lwe intanethi) kwaye ifuna umquququzeleli wenkqubo ukuba afake imigaqo efanayo yedata kwi-Punicompserorcess jourcers (okanye uluhlu olungena system) kwaye ifune ukuba ifune umququms imfuno-oserverse. Ukungaphumeleli ukulawula ii-sccordiates (ieces) kusetyenziswa kwisivumelwano esisezantsi.

[[UMTLL:0] Unxulumaniso olungundoqo: GDPR – unikezelo (EU) 2016/678 (EURÍLCE)

Ukuphonononga Nokusebenzisa iDPA: Izenzo Ezisemgangathweni Kumaqela Oluntu ase-Ireland

Ukukhuphela i-DPA yesikhokelo kwi-intanethi ekwingozi yokungafumaneki kweemfuno ezicacileyo zase-Irish à shocie system Act 2018. Impumelelo yeDPA ifuna incoko ecwangcisiweyo phakathi komlawuli kunye nomphathi, ingakumbi kunxulumano lweshishini apho amandla okuthelekisa anokungalingani.

Ukusebenzisa Inkohliso Nokungakhathalelwa

I-GDPR ivumela ukwabiwa kwetyala phakathi komlawuli kunye nomqhubekekisi, kodwa amaqela akanakushwabana ngaphandle kwetyala lomthetho kwizihloko zogcino-lwazi. I-DPA elungiswe kakuhle iza kuquka ii-countmenting cops, kodwa kufuneka iqinisekise ukuba umqhubi uhlala efanelwe kukulahlekelwa okubangelwa kukungaphumeleli kwakhe ukuhambisana ne-DPA okanye ne-GDPR. Imigaqo yomthetho we-Ireland esebenzayo, ngoko ke i-DPA kufuneka imisele ngokucacileyo ukuba yeliphi iqela elithwele umthwalo wobungqina kwityala nendlela iingxabano eziza kuconjululwa ngayo (ngokuqhelekileyo phantsi komthetho wase-Ireland kunye neenkundla zase-Ireland).

Amalungelo ophicotho-zincwadi nohlolo

Inqaku 28(3) (h) linika umlawuli ilungelo lokuqhuba uphicotho-zincwadi, kuquka uhlolo, lwezixhobo zomqhubekekisi kunye neenkqubo. I-DPA kufuneka ichaze ukuphindeka (umz., ngonyaka okanye ngesizathu esifanelekileyo), ububanzi, kunye nexesha lesaziso. Abalawuli abaninzi abaxhathisi abaxhathisi kuphindo-zincwadi oluthe rhoqo, ulala-phantsi okusebenzayo kukuvuma i-crediation yesithathu (enjenge-ISO 27001 okanye SOC 2) ukulala kwe-e, kodwa i-DPA kufuneka igcine ilungelo lomlawuli lokucela ubungqina obubheke phambili ukuba i-claces ayifanelekanga.

Uthutho logcino-lwazi lwehlabathi

Ukuba umenzi-nkqubo udlulisa i-data yobuqu kwilizwe lesithathu (ngaphandle kwe-EEA), i-DPA kufuneka iquke indlela yokudlulisela esebenzayo. Abaququzeli be-UK, isigqibo sokunika imvume ngokusebenza, kodwa imibutho kufuneka ijonge utshintsho. kwamanye amazwe, iintlawulo eziqhelekileyo zesivumelwano (SCCCs) zilelona cebo liqhelekileyo. IKomishini ye-2021 SCCCCs idibanisa iziquzelo ezigqumathelweyo ezigqumathelwe ngumlawuli wamacandelo 76toprocessor, umqhubekekisi, kunye nomatshini osebenzayo. I-DPC ilindele ukuba i-DPA ibhekise kumsebenzi we-SC kwaye iquke umdibaniso ogqityiweyo kwi-DC kwi-DPTreemodyations. [0] kunye ne-DFTPrectives]

[[UMTHETHO] Uqhagamshelwano olungundoqo: Umthetho wokhuseleko weData 2018 – Isi- Irish Signte Book

Ukunyanzeliswa Nokukhuselwa EIreland

I-DPC yenye yezona zigunyaziso zisebenzayo zokhuseleko logcino-lwazi eYurophu, enengxelo engqinelanayo yokunyanzelisa ukuchana koomatshini bobugcisa abakhulu kunye nemibutho emincinci. Ukungahambelani nemfuno ze-DPA — njengokungafumani isivumelwano esibhaliweyo, njengokusebenzisa amaziko angaphantsi kwe-panecription ngaphandle kokugunyaziswa, okanye ukungahoyi amalungelo ogcino-lwazi — kungabangela uphando kunye nenkonko eninzi.

Indima yeKhomishini yoKhuselo loGama

I-DPC inikwe amandla phantsi kweCandelo 6 loMthetho woKhuselo logcino-lwazi 2018 ukuqhuba uphando, ukukhupha imigaqo yokulungisa, nokuphonononga iimali zolawulo. Ingakhupha uqeqesho, ucwangciso logcino-lwazi lokumisa, ithintela umqhubekekisi, okanye ifune umlawuli ukuba ahlaziye iDPA. Ii-Fayile zingafikelela kwi-CR20-zigidi okanye 4% yokuguquka konyaka ongaphambili, okuthi nangaphi na ephezulu. Kwiminyaka yakutshanje, i-DPC ikhuphe intembelo eninzi (1260millionfion), okanye ifuna ulawulo lokungahambelani okunxulumene nezivumelwano zogcino-data, kuquka nezikhuseli ezingenelanga kunye nokungangeneyo kwe-ofisi ze-ofisi ze-ofisi.

Iindawo zokuxhasa eziqhelekileyo

  • Akukho DPA endaweni: Imibutho emininzi iqala ugcino-lwazi loqhubekeko ngaphandle kwesivumelwano esityikityiweyo, ngokufuthi kwimo ezingxamisekileyo zokubotshwa kwebhodi. Oku kukwaphulwa ngqo kweGatya 28.
  • [[UMTL:0] Izivumelwano eziphunyeziweyo: ii-DPA ezityikitywe phambi koMeyi 2018 kwaye azizange zihlaziywe ukubonakalisa imigangatho ye-GDPR aziyonto idibani.
  • [[FLT: 0] Abasebenzi abangevayo:[[FL:1] Umqhubekekisi akaphumeleli ukwazisa umlawuli wesixhobo sokusebenza esisezantsi esitsha, okanye umphathi akalugcini uluhlu oluvunyiweyo.
  • [[NTL:0] Ixesha lokunika isaziso sexesha: I-DPA icwangcisa iiwindow zokwazisa ixesha elingaphezu kwama-48 eeyure, eliphikisana nolindelo lwe DPC lokunika ingxelo ngokukhawuleza.
  • Iphepha loxwebhu lobuchule bokudlulisa: A DPA equka uqhubekeko lwewonga lwe khowudi enqamlezayo ````' kodwa engabhekisi mbekiselo SCCs' okanye isigqibo sokungafundi sishiya amaqela omabini esemngciphekweni.

Izenzo nokhokelo lwakutshanje

I-DPC iye yapapasha ukhokelo lwenkqubo yokulungisa i-DPAs, kuquka isivumelwano sesikhokelo kunye noluhlu lwemilinganiselo yokhuseleko enconyelweyo. Ngo-2023, i-DPC yahlawulisa umqhubekekisi omkhulu we-DEPC 15 lezigidi ngokusilela ukugcina i-DPA kunye nabalawuli bayo abasezantsi kwaye ukunganiki uncedo olwaneleyo kwizihloko zogcino-lwazi. Isigqibo sagxininisa ukuba i-DPC ayilwamkeli ukuthobela okungasebenziyo — ilindele ukusebenza, ibhaliwe ngokulandelelana. Iqumrhu kufuneka zihlole rhoqo ii-DPAs zabo ngokukhanya kwe-DPC izigqibo kunye nezigqibo ezihlazisiweyo zebhodi yokhuseleko logcino-lwazi lwaseYurophu (EDPB).

[[UMTLL:0] unxulumaniso olungundoqo: Izalathiso ezikwi Projekti Yokulungelelanisa Ugcino-lwazi

Ukwakha Umsebenzi OneeDPA Oneengqalelo Ezizinzileyo

I-DPA enye ayinele. Abalawuli nabaqhubi kufuneka bafake ulawulo lwe-DPA kwinkqubo yabo ebanzi yolawulo logcino-lwazi. Oku kuthetha ukugcina ubhaliso lwayo yonke imisebenzi yokuqhubekekisa, ukuhlaziya i-DPA naninina indalo okanye umlinganiselo wotshintsho loqhubekeko, kunye nabasebenzi boqeqesho ukubona xa i DPA ifuneka — umzekelo, xa befaka isinikezeli se-CRM esitsha, inkonzo yokuqesha, okanye umrhwebi wezinto eziphathekayo wamafu. Iqumrhu limele kwakhona liqwalasele ukudibanisa isiluleko somthetho we-data onobuchule obuntsonkothileyo i-DPAs, ingakumbi ezibandakanya ukudluliswa kwezizwe ngezizwe okanye udidi oluthile lwe-data.

Amanyathelo Okutsalana

  1. Phephela lonke ulwalamano olukhoyo lwesithathu ukuchonga naluphi na olubandakanya ukwenziwa kolwazi lobuqu ngaphandle kweDPA esebenzayo.
  2. Hlola iDPA nganye ngokuchasene noluhlu lwenqaku lama-28 kunye nongezo lwe-Irish Data Protection Act 2018.
  3. Uxwebhu lobuchule bokudlulisa ukuba idata ihamba ngaphandle kwe-EEA, kunye nohlolo olupheleleyo lwempembelelo edlulisiweyo.
  4. Beka inkqubo engaphantsi kwe-692 yokugunyazisa, kuquka iwindow yokwazisa kunye nexesha lokungavumi.
  5. Inika iDPA kwi-DPC xa ucela; gcina imibhalo etyikitywe ifumaneka ngexesha lokulungiselela kunye nonyaka.

[[FT:0] uqhagamshelwano olungundoqo: HSE Ireland – DPA Isikhokelo seSahluko sezempilo

Isiphelo

Isiseko somthetho wogcino-lwazi sokulungiselela izivumelwano phantsi komthetho wase-Ireland asingomsebenzi ozikhethelayo — zikho ezingundoqo zokuthobela i-GDPR kunye nesixhobo esibalulekileyo sokwakha ukuthembana ngemibandela yogcino-lwazi, abathengi, kunye nabalawuli. Isakhiwo somthetho, esakhiwe kwi-GDPR kwaye somelezwa yi-DDPR Act, sifuna ukuba abalawuli nabaquququzeleli basebenze kunye ukuchaza zonke iinkalo zogcino-lwazi lobomi bebhayiseko. Ukusuka ekuchazeni umlinganiselo kunye nokhuseleko lokulawula abasebenzi abangaphantsi kwe-data kunye nokuthunyelwa kwezizwe ngezizwe, i-[662] ikhusela amaqela omabini kwaye iqinisekisa ukuba amalungelo e-data ahlonelwa. Intlangano ephatha ii-DPA njengesenzo solawulo oluqinileyo, ngexa ezo ziphathwa njengezixhobo ezilawulayo ezilawulayo zizakubuyiselwa kwi-Rwanda kumazwe azimeleyo kwi-Iriland kunye neenjongo ze-Unian