Xa imibutho yase-Ireland idlulisela ugcino-lwazi lobuqu kumazwe angaphandle kwe-Europe Ecean Economic Area (EA), kufuneka isebenzise indlela enzima yokwahlula umthetho. Uxwebhu logcino-lwazi olulungelelanisayo (DPA) luluxwebhu olulawula ukudluliswa okunjalo, luqinisekisa ukuba ugcino-lwazi luchaziwe ngokuhambelana nokhuseleko lwe-DChebelo (GDPR). Eli nqaku linika isikhokelo esibanzi sokuqonda ii-DPAs kuthunyelo logcino-data lwase-Irish, iimfuno zomthetho, amalungiselelo angundoqo, kunye namanyathelo asebenzayo okuthobela.

Yintoni Isivumelwano Sogcino - lwazi Esenzeka Ngeenkqubo?

Isivumelwano sokulungelelanisa ugcino-lwazi sisivumelwano esibophelelayo esisemthethweni phakathi komlawuli wogcino-lwazi kunye nomqhubekekisi wogcino-lwazi. Phantsi kweGqr 28 we-GDPR, umphathi kufuneka asebenzise kuphela abaququzeli abanika isiqinisekiso esaneleyo sokuzalisekisa imilinganiselo yobuchule kunye nemibutho. I-DPA imisela ezi zibophelelo kwaye icwangcise imigaqo apho ugcino-lwazi lobuqu lungalungiswa khona ngenxa yomlathisi.

Kwimibutho yase-Ireland, i-DPA ibaluleke kakhulu xa inkqubo ibandakanya ukudluliswa kogcino-lwazi lobuqu ukusuka e-Ireland ukuya kwilizwe lesithathu (indawo engaphandle kwe-EEA). Ukufuduswa okunjalo kunokwenzeka xa kusetyenziswa amafu asetyenziswayo eUnited States, ukuba nesazulu sonxulumano eIndiya, okanye ukusebenzisa iqonga lorhwebo elisekelwe kulawulo lwe-EA. I-DPA kufuneka ithethe ngeemfuno jikelele kunye neemeko ezithile zokuthunyelwa kwezizwe ngezizwe ngezizwe.

Kubalulekile ukwahlula iDPA kwisivumelwano senkonzo esisesikweni. Ngelixesha isivumelwano senkonzo sigqubuthela amagama entengiselwano (everheni, kumgangatho wenkonzo, kwimpahla yenkcubeko), i-DPA sisihlomelo sogcino-lwazi esilawula ngokucacileyo indlela ephathwa ngayo i-data yobuqu. Kwiimeko ezininzi, i-DPA iqhotyoshelwe njengesivumelwano esingundoqo, kodwa kufuneka ityikitywe ngamaqela omabini ukuze inyanzeleke.

ISiseko esingokwasemthethweni sokuDlulisela ugcino-lwazi lwase-Ireland

Isiseko esisemthethweni sokudlulisela ugcino-lwazi lobuqu ukusuka e-Ireland ukuya kumazwe esithathu sibekwe kwiSahluko V se-GDPR (Artles 44-49). I-Ireland, njenge-EU Thembet State, inamathela ngokupheleleyo kwi-GDPR, kunye ne-Irish Data Protection Commission (DPC) ligunya eliyintloko. ESeko iBretit, uBukumkani ngoku buphathwa njengelizwe lesithathu phantsi kwe-GDPR, nangona i-EUPK Tradentir kunye ne-Cooperation Revolution inikezela ngogcino-lwazi lokwexeshana phantsi kwesigqibo sokwexeshana de kube ngoJuni 2025 (intloko yokulungisa).

Umgaqo ongundoqo wesahluko V ngowokuba ukudluliswa kungabonakala kuphela ukuba umlawuli nomqhubekekisi uvumelana neemeko ezibekwe phantsi kwi GDPR. Ngokungqalileyo, ukudluliswa kufuneka kusekelwe kwenye yezi nkqubo zilandelayo:

  • Isigqibo sokungafundi yiKomishini yaseYurophu, iphinda iqinisekise ukuba ilizwe lesithathu liqinisekisa umgangatho owaneleyo wokhuseleko logcino-lwazi (umz., iJapan, iMzantsi Korea, i-UK phantsi kolungiselelo loqhagamshelwano).
  • [[UMTL:0] Appropriariate ukhuseleko, oluquka i-Sed Contractive Clauss (SCCs), Imithetho yeKhorporatime (ii-BCR), okanye ikhowudi evunyiweyo yehambo.
  • [[NT.:0] Undululo kwiimeko ezithile (umz., imvume ecacileyo, imfuneko yokwenza isivumelwano, izilangazelelo ezibalulekileyo). Ukususwa komngcipheko akumele kusetyenziswe njengendlela yokudlulisela eqhelekileyo.

Emva [[NTL:0] Schrems II ummiselo (20), iNkundla yeJaji yeEuropean Union (CJEU) yenza umgangatho weSicwangciso seShiyelo sobuGcisa waze wabeka iimfuno ezongezelelekileyo zokudlulisa i-SCC. Izilungiselelo kufuneka ngoku ziqhube i-Assuement (TIA), kwaye xa kuyimfuneko, zizalisekisa imilinganiselo efunekayo ukuqinisekisa umgangatho othe ngqo wokhuseleko kwilizwe elisingileyo.

Isiseko Esiyintloko Sesivumelwano Sogcino-lwazi Esenzeka

I-DPA eyomeleleyo kufuneka iquke zonke iziqalelo ezifunekayo kwinqaku 28(3) leGDPR, kunye nezigaba ezongezelelekileyo ezijongene nokudluliswa. Ngaphantsi ludityaniso olunenkcukacha lwelungu ngalinye elingundoqo.

1. Umba ongundoqo kunye nexesha lokuqhubekeka

I-DPA kufuneka ichaze ngokucacileyo indalo, injongo, kunye nexesha lokusebenza. Oku kuquka ukuchaza iindidi zogcino-lwazi lobuqu olucacisiweyo (umz., amagama, iidilesi ze-imeyili, ugcino-lwazi lwemali, ugcino-lwazi lwempilo) kunye neendidi zemiba yogcino-lwazi (umz., abathengi, abasebenzi, iindwendwe zewebhusayithi). Ixesha elimele lilungelelaniswe nesivumelwano senkonzo esingaphantsi, kuquka amalungiselelo okukhutshwa kogcino-lwazi okanye ukubuya ekuphelisweni.

2. Indalo nenjongo yokulungiselela

Eli candelo lichaza imiyalelo yomlawuli. Umqhubi wenkqubo unokusebenzisa imiyalelo ebhaliweyo evela kumlawuli. Nayiphi na into esetyenziswayo ngaphandle kwenjongo echaziweyo (umz., ukusebenzisa ugcino-lwazi lomntu osebenza ngemichiza) kufuna imvume eyahlukeneyo okanye isiseko esisemthethweni.

3. Iimbopheleleko namalungelo omphathi

I-DPA kufuneka iphinde iqinisekise iimbopheleleko zomlawuli phantsi kwe-GDPR – ingakumbi umsebenzi wokuqinisekisa isiseko esisemthethweni sokulungiselela nokuzisa izihloko zogcino-lwazi. Ikwachaza nembopheleleko yomququzeleli yokunceda umlawuli ekufezeni imisebenzi yakhe, njengokuphendula kwizicelo zokufikelela kolwazi (ama-DSAR) okanye ukwabela umlawuli wendawo yokwaphulwa kolwazi lobuqu.

Amanyathelo okhuseleko logcino-lwazi

Inqaku lama-32 lifuna umlawuli kunye nomqhubekekisi womamkeli wokwenza amanyathelo obugcisa kunye nombutho. I-DPA kufuneka idwelise ulawulo lokhuseleko oluthile (umz., ukuvulwa kombhalo ofihlakeleyo kuphumla nakuthutho, ulawulo lokufikelela, uvavanyo lokhuseleko oluthe rhoqo). Imibutho yase-Ireland ikhupha ipeyinti kumnikezeli wamafu, eli candelo kufuneka lichaze isiqinisekiso sokhuseleko lomnikezi (ISO 27001, SOC 2, etc.) kunye neziganeko zokuphendula.

5. Ukusetyenziswa kweziqhubi ezisezantsi

Ukuba umqhubekekisi uceba ukudibanisa enye into ekhoyo (isixhobo esisezantsi esingumlawuli) ukuphatha ugcino-lwazi lobuqu, iDPA kufuneka ichaze inkqubo yokugunyaziswa. Ngokwesiqhelo, umlawuli kufuneka anike ugunyaziso olukhethekileyo okanye ugunyaziso olubhaliweyo jikelele ngelungelo lokubeka into kwiinguqu. Umqhubi makaphumele phantsi iimfanelo ezifanayo zokukhusela ugcino-lwazi kubasebenzi abangaphantsi kwe-cellaccountings ngesivumelwano. Oku kuyimfuneko xa i-'[8]processiontor ibekwe kwilizwe lesithathu – izikhuseli zokudlulisa ezinye izinto zisenokufuneka.

6. Uthutho lwamazwe ngamazwe

Apho umqhubekekisi okanye umququzeleli ubekwe khona ngaphandle kwe EEA, i DPA kufuneka imisele indlela yokudlulisa ixhomekeke kuyo. Ukuba usebenzisa umgangatho wonikezelo uClaus (SCCCs), uhlobo lwangoku (2021) kufuneka lufakelwe. I DPA kufuneka ifune umlungisi wokwazisa umlawuli phambi kokudlulisela ugcino-lwazi kwilizwe elingagqunywanga sisigqibo sobukhoma, nokusebenzisana ekuqhubeni uphatho loMngeniselo.

7. Ulawulo lwezibonelelo

Umqwalaseli kufuneka ancede umlawuli ekuzaliseni izicelo zokusebenzisa amalungelo omxholo wogcino-lwazi (asekunene kokufikelela, ukubuyiselwa, ukuvalela, ukuthintela, ukubonakala, ukuchasana). I-DPA kufuneka ichaze amaxesha okuphendula, iziqhagamshelanisi zonxibelelwano, kunye nembopheleleko yomququzeleli ukuba azise umlawuli waso nasiphi na isicelo esingqalileyo esivela kumbandela wogcino-lwazi.

8. Isaziso sokudibanisa ugcino-lwazi

Kwisiganeko sokwaphula kolwazi lobuqu, umlungisi kufuneka azise umlawuli ngaphandle kolibaziseko olungafanelekanga (ngokubanzi kwi 24-48 iiyure). I DPA kufuneka ichaze ulwazi loqhubekeko-nkqubo ekumele lunikezele (ulwaphuko, iindidi ezichaphazelekayo, iziphumo, imilinganiselo yokulungisa). Ngoko umphathi umele anike ingxelo kwi DPC ukuba kufuneka.

Uphicotho-zincwadi

Umlawuli unelungelo lokuhlola ukuthobela komququzeleli. I-DPA kufuneka ivumele uhlolo oluzimelayo okanye uphicotho-zincwadi oluzimeleyo, phantsi kwesaziso esisengqiqweni kunye nemfihlelo. Kumaziko kawonke-wonke ase-Ireland, izibophelelo ezongezelelekileyo zokubona zisenokusebenza phantsi koMthetho wenkululeko yoLwazi.

10. Ukuphelisa kunye nokubuyiselwa kogcino-lwazi okanye ukukhutshwa

Ekupheleni kwenkonzo yokulungiselela, umlungisi kufuneka, kukhetho lomlawuli, abuye yonke i-data yobuqu okanye ayicime, ngaphandle kokuba i-Union okanye umthetho welungu leLizwe ufuna ukugcina. I-DPA kufuneka ichaze ixesha lokulinganisa (umz., ngeentsuku ezingama-30) kwaye ifune ukuvalwa kokucinywa.

Amanyathelo Ongezelelweyo Okuthunyelwa Kwamazwe Ngamazwe: Schrem II Nangaphaya

Ukusukela [[NTL:0] Schrems II isigqibo, i-DPA equka i-SCCs ayisanele. Iintlangano kufuneka ziqwalasele ukuba isakhiwo esisemthethweni selizwe elisisiphelo sinikela ukhuseleko olulinganayo. Oku kwenziwa ngonikezelo lwe-Assesment (TIYA), ekufuneka ibhalwe njengenxalenye yenkqubo ye-DPA.

I-TIA ivavanya imithetho nezenzo zelizwe lesithathu, kuquka amagunya okuhlola, ukufikelela kwabasemagunyeni, kunye nokulungisa imicimbi yoluntu. Ukuba kukho iikhefu, amanyathelo ongezelelo kufuneka asetyenziswe. Amanyathelo aqhelekileyo ongezelelo aquka:

  • Amanyathelo obuchule: isiphelo sokukhowuda, ukwenziwa, okanye umqondiso othintela umthumeli ukuba afunde ugcino-lwazi ngaphandle kwesitshixo somlawuli.
  • Amanyathelo aququzelelayo: imigaqo engqongqo yangaphakathi, amacandelo agunyazisa ukufikelela korhulumente ngaphandle kwesiseko esisemthethweni, kunye neemfanelo zokubonisa ngaphaya.
  • Imilinganiselo enxulumeneyo: yandisa ii-SCC ngeembopheleleko ezongezelelekileyo, njengesaziso esikhethekileyo sezicelo zokufikelela kumagunya asemzini.

Ngo-2023, iKomishini yaseYurophu yamkela isigqibo esitsha sokungaqiniseki se-EU-US Data-askhostry somsebenzi (DPF). Imibutho yase-Ireland edlulisela ugcino-lwazi kwizinto ezizimeleyo zase-US phantsi kwe-DPF ingaxhomekeka kulwakhelo endaweni ye-SCC. Noko ke, abanikezeli bamafu abaninzi base-US abakagunyaziswa, kwaye i-SCCC ishiye ikhonziwa yinkqubo engagqibekanga. I-DPC ipapashe ukhokelo kulwazi lwendlela yobugcisa ye-TIA kunye nokulindela ukuba abalawuli be-TI-A bagcine i-TI njengendlela yohlalundo oluqhelekileyo.

Izenzo Ezibalaseleyo Zomanyano Lwase-Ireland

Ukuqinisekisa ukuba ukuthobela okunamandla neDPAs nemithetho yokudluliswa kogcino-lwazi, imibutho yase-Ireland kufuneka yamkele ezi nkqubo zilandelayo:

Ukukhuthala Ngokucokisekileyo

Phambi kokusayina i-DPA, qwalasela ukuma kogcino-lwazi. Ukucela iikopi zemigaqo yayo yokhuseleko, iingxelo zovavanyo lokungena, iziqinisekiso (ISO 27701, SOC 2 Type II), kunye nayo nayiphi na imbali yokwaphula ulwazi kwangaphambili. Ukuba umenzi womsebenzi usekelwe kulawulo oluphezulu lwe-"%risk, qinisekisa uhlolo olusemthethweni lwemithetho yokuhlola. Le nzondelelo ifanelekileyo mayibhalwe kwaye iphindwe rhoqo.

Sebenzisa Ikhomishini YaseYurophu Engumgangatho KaClaus (2021)

Ii-2021 SCCCs zihamba-hamba (i-dectorer 31:totóprocessor, umqhubekekisi ngqauni u-Equtosubprestor, njl.njl.) kwaye ziquka iirejista ezithile zothutho lwezizwe ngezizwe. Zikwafuna amaqela ukugqiba “ulwazi oluqhubekekisa ulwazi” lokudwelisa iindidi zedata, iinjongo, kunye nezikhuseli. Kuphephe ukusebenzisa ii-SCC ezindala ngaphandle kokuba uqhubekeko olumxinwa (ukungabikho mngciphene wezivumelwano kugqitywe ngaphambi komhla wama-7 ku-September 2021, ezimele zithatyathwe endaweni ye 27 kaDisemba 2022).

Izixhobo Ezisemgangathweni

Gcina irejista yazo zonke iiDPA ezisebenzayo, kuquka nomhla otyikityweyo, iinkonzo ezigutyungelweyo, iindlela zokudlulisa ezisetyenzisiweyo, kunye nomhla wexeshana lokuphelelwa. Olu lwazi lunceda umphathi wokhuselo logcino-lwazi (DPO) ukujonga ukuthobela nokuzinziswa kocwangciso. Ikwaxhasa nezibophelelo zokuphendula phantsi kweGatya 30 (ukuqulunqwa kwemisebenzi yokuqhubekekisa).

Uloliwe osebenzayo noMbutho oPhathisiweyo

Amaqela alungisayo, abaphathi, kunye nesiluleko somthetho kufuneka baqonde iimfuno ze-DPA. Qeqesha uqeqesho lokuchaza xa kufuneka i-DPA (umz., xa uqesha umrhwebi omtsha we-software othengisa i-data elawulayo), nendlela yokuthethana ngezimvo ezingundoqo. I-Embed DPA i-evation kwi-oventing.

Hlola IDPA Rhoqo Uze Uhlaziye

Ukuba umsebenzi woqhubekeko-phambili utshintsha – umzekelo, uhlobo olutsha logcino-lwazi luqokelelwe, i-subgresss encinci idityanisiwe, okanye umqhubi wenkqubo ususa iiseva zayo – i DPA kufuneka ihlaziywe. Seka umjikelo othe rhoqo (ngoku) ukuqinisekisa i DPA ibonisa ubunyani obukhoyo ngoku kunye nenkqubela-phambili (umz., izigqibo ezintsha zokungagqibeli, iirula zeCJEU).

Ilungelelaniswe neKhomishini yoKhuselo logcino-lwazi

Ukuba ugcino-lwazi lwakho lombutho olunokuba neziphumo zomngcipheko omkhulu kubantu ngabanye (umz., umlinganiso omkhulu wokuphunyezwa kweendidi ezithile zogcino-lwazi), kusenokufuneka uqhube i-data yokhuselo lwe-Astylement (DPIA) egquma izinto ezidluliswayo. i-DCA kunye ne-TIA zingadityaniswa. Ukuba kunjalo, funa ukwenziwa kwangaphambi kovavanyo nge-DPC – oku kubalulekile ngokukhethekileyo kwiinkqubo zokudlulisela ezintsokothileyo.

Iimpazamo Eziqhelekileyo Nendlela Yokuziphepha

Kwanemibutho enamava ityibilika kwiDPAs ukwenzela ukudluliswa kwezizwe ngezizwe. Nazi iimpazamo ezisoloko zikho nezilungiselweyo:

  • [[NTLT: 0] I-DPA njenge memoricity ye-harkets. I-DPA efana nayo ekhutshelwe kukhuphiswano ingaphosa iimfuno zesi-Irish à sync, njengemfuneko yokubhekisa i DPC njengegunya elikhokelayo. Fix: I-DPA kuqhubekeko oluthile, indawo yomatshini, kunye neendidi ze data.
  • Ibhekiselele kwi SCC kuphela ngaphandle kwe-TIA. I-DPC ilindele ukubona naluphi na uthumelo olubhaliweyo lwe-TIA olusekelwe kwi SCCCs. Fix: Sebenzisa ibhodi yokhuselo logcino-lwazi lwaseYurophu (EDPB) Isikhokelo se-TIA, esifumaneka kwiwebsite ye-DPC.
  • [[FLT: 0] Ifuna umenzi wemibhobho esezantsi. Isixokelelwano singadibanisa iprocess kwilizwe lesithathu umlawuli ebengaqondi. Fix:[ Ufuna umqhubekekisi ukugcina uluhlu lwe ```iiprocess' kwaye afumane imvume yomlawuli wesibophelelo ngasinye esitsha.
  • [[FLT: 0] Ukuthunyelelwa ukuhambisa imaphu yogcino-lwazi. Ukuba awazi apho ugcino-lwazi luqhubekekiswe khona, awunakuqinisekisa i DPA igquma udluliso. Fix:[ Iqhuba uqhubekeko logcino-lwazi lwemaphu phambi kokuzoba i DPA. Quka namaqela ogcino-lwazi lwamafu, unikezelo olude ngabaxhasi, kunye neenkxaso zogcino-lwazi.
  • [[FLT: 0]] Ukukhupha unikezelo. Uninzi lwe DPA luswele amanyathelo acacileyo okubuyisela ugcino-lwazi okanye ukucima xa isivumelwano siphela. Fix: Ikhankanya ulungiselelo lwe data ebuyisiweyo (umz., ifayile efihliweyo), indlela yokucinezela (umbhalo, utshaba oluphathekayo), kunye nommiselo wexesha.

Isiphelo

Ugcino-lwazi oluququzelela amaBhunga e-GDPR lusimbombo esisemthethweni sokudluliswa kogcino-lwazi lwezizwe ngezizwe kwimibutho yase-Ireland. I-DPA efakelweyo ayiqinisekisi nje kuphela ukuhambelana neManqaku 28 kunye no-449 e-GDPR kodwa ikwakha ukuthemba abathengi kunye namaqumrhu. Ukunikwa kwe-evoccccagggrate media esemthethweni – ukusuka [ Schrems II [[FLT: 1]] [iiiiii-US US ugcino-Fremectal eqedworkings kunye ne-octives ze-UK's Preactives kunye ne-out's e-out's processsssssssssss, kunye ne-dvertsss admit, i-marks ad proms, i-data yehlabathi lobugciogciog.