Isingeniso: Isizathu Sokuba Ukwaziswa Kuvikele Izindaba Ekusebenziseni Ikhono Lase - Ireland

Izinqubo zebhizinisi eziphoqelelayo e-Ireland ziye zaba yisinyathelo esisebenzayo ezinkampanini emhlabeni wonke. Izwe linikeza izisebenzi ezinekhono elikhulu, indawo engcono yentela yenkampani, nohlelo oluqinile olungokomthetho oluhambisana nezindinganiso ze-European Union. Nokho, ngokudluliselwa kwemininingwane yomuntu siqu kumngane ongaphandle kunomthwalo wemfanelo omkhulu. Ukungavunyelwa noma ukungahambisani nemithetho kungaphumela ekungathembini kwabathengi, izijeziso ezingokomthetho, nomonakalo odumile owedlula kude noma yiziphi izindleko ezigciniwe. Lesihloko sinikeza isiqondiso esiwusizo, ngokufinyela ukuvikela imininingwane yomuntu siqu emishwaneni yenkonzo yase-Ireland, izibopho ezingokomthetho, izibopho zokusebenza, kanye nezinhlelo zokukhomba ukukhomba ezithathelwa isikhathi eside.

Ukuqonda Imithetho Yokulondoloza Ukwaziswa E - Ireland

I-Ireland iyilungu le-European Union futhi ngenxa yalokho ingaphansi ngokugcwele kwe- Geoverral Data Protection Regation (GDPR). I-GDPR ingenye yezisekelo eziqinile zokwaziswa, futhi isebenza kunoma iyiphi inhlangano ehlela imininingwane yomuntu siqu phakathi kwe-EU, kungakhathaliseki ukuthi inhlangano ngokwayo isekelwephi. Uma inkampani ingasebenzi kumngane wase-Ireland, bobabili umlawuli we-data (inkampani yakho) ne-projekthi ye-data (isisebenzi se-data) ne-GDPR.

I-Ireland iphinde yamisa uMthetho Wokuvikela 2018, owenezela ku-GDPR futhi umisa i-Ireland yokhuselo ( Data Device Commission [DPC]] njengegunya lesizwe. I-DPC inamandla okuhlola, ukukhokha izinkomba ze-CP zokwenyuswa kwezigidi 20 noma 4% zenguquko yonyaka yonke (noma nini ephakeme), futhi ngisho nokuvinjelwa kwemisebenzi yokulungisa ukwaziswa. i-Nonblylia ayiyona ingozi engathikathayo; i-DPC ibhale umlando omuhle embonini enkulu yezobuchwepheshe eminyakeni yamuva. Ngakho, noma iliphi ilungiselelo lembulunga yembulunga kumelwe liqale ukuhlanganisa nokuqondana kwe-GDR.

Izimiso Eziyinhloko Ze - GDPR Zokuphoqelela

  • [[I] Ukwethakathi, ukulunga, nokubona ngapha nangapha: Izihloko zemininingwane kumelwe zaziswe ngendlela imininingwane yazo eyokwehliswa ngayo futhi ngayiphi injongo.
  • Ukulinganiselwa: Imininingwane ingaqoqwa kuphela ngezinjongo ezicacisiwe, ezicacile, nezingokomthetho.
  • Isilinganiso esincane se-data: Isilinganiso esincane kakhulu solwazi lomuntu siqu oludingeka ukuze kusetshenziswe inkonzo yokuphuma emsebenzini kufanele kwabiwe.
  • Accurturacy: Imininingwane kumele igcinwe inembile futhi ifinyelele osukwini.
  • Ukulinganiselwa:[ Imininingwane kufanele igcinwe kuphela uma kudingekile ngenjongo.
  • [ Ukungaguquguquki nokufihla imfihlo (ukugcinwa): izilinganiso zobuchwepheshe nezihlangene ezifanele kumelwe zibe khona.
  • Ukukhokha-mali:[ Umlawuli wokwaziswa unomthwalo wokubonisa ukuvumelana nazo zonke izimiso.

Ukuze ikhiphe ngokuqondile, i-GDPR iveza imfuneko ebophekile ye-data yomuntu, izigaba ze-memone yokuhlela i-(DPA) [DFLT:1] phakathi komlawuli nomphathi. Le DPA kumelwe ichaze indaba yesihloko, isikhathi, imvelo, nenjongo yokulungisa, izinhlobo zemininingwane yomuntu, izibopho zokwaziswa, kanye namalungelo omlawuli. Umlawuli angasebenzisa kuphela imininingwane eqinisekisiwe kumlawuli futhi aqinisekise ukuthi izisebenzi zakhe ziboshwe ngezibopho eziyimfihlo.

Izinyathelo Eziyinhloko Zokuvikela Imininingwane Yomuntu Siqu

Ukuba Nenkuthalo Ngokuphelele

Ngaphambi kosayina noma isiphi isivumelwano, hlola ukuthi uzakuvikela umuntu ozosebenza naye ekumeni kwakhe. Ukucela imibhalo enjengezitifiketi zabo ze-GDPR zokugcina ukwaziswa, izinqubo zokwaziswa, amalungiselelo ezenzakalo, namarekhodi emisebenzi yokulungisa (ROPA). Hlaziya umlando wabo nge-DPC noma abanye abaqondisi, bese ucela amaphuzu kubathengi abakhona. Ukuhambela i-indawo noma ukubukezwa kokhuseleko kungaveza izikhala zezindawo eziqinile nezinengqondo ezilawula ukuvikela okungase kulahlekele.

Lapho uhlola abanikezeli base-Ireland, funa iziqinisekiso ezinjenge- ISO/IEC 27001 (ukuphathwa kwendlela yokwethula yokwaziswa) noma ISO/IEC 27701 (ukuphathwa kolwazi olubhaliwe). Lezi ziqinisekiso zibonisa ukuzinikela kwemisebenzi engcono kakhulu emhlabeni wonke. Ngaphezu kwalokho, ziqinisekisa ukuthi umqaphi umise isikhulu se-DDPR (DPO) i-AR (Artle 37). Ngisho noma ingafuneki, i-DPO enikezelweyo isibonakaliso esinamandla sohlelo lwezemfihlo oluvuthiwe.

2. Izivumelwano Zokwaziswa Eziwubuciko

Isivumelwano esibhaliwe i-DPA iyimfuneko engokomthetho, hhayi ekhethweni. I-DPA kufanele idlule ngalé kolimi oluphihliwe futhi ihlanganise imininingwane eqondile ngemisebenzi yokulungisa, izilinganiso, amalungiselelo ama-template, izilinganiso zemininingwane, iziteshi zezaziso, izikhawu zemininingwane ezifihlwayo, izinqubo zokuzigcina nokucisha, amalungelo okubala ama-data aphulwe. I-DPA ecacile isho ukuthi umnini-DPA uzokwenza kuphela ngemiyalo yakho ebhalwe phansi futhi ngeke asebenzise imininingwane nganoma iyiphi injongo ngaphandle kokunikeza izinqubo ze-odawords.

Ngaphansi kwe-GDPR, umqondisi wendlela akumelwe afake omunye ugunyazo olungaphansi ngaphandle kokugunyaza okuqondile noma okubhaliwe okuvela kumlawuli. Uma kunikezwa ugunyazo oluvamile, umqondisi kumelwe akuzise nganoma yiluphi ushintsho oluhlongozekile futhi akunike isikhathi sokulwa. I-DPA kufanele ibonise lokhu kulawula. Abaxhasi abaningi base-Ireland basebenzisa izigijimi ezivamile (SCCC) zamalungiselelo anjalo, kodwa iqembu lakho elingokomthetho kufanele lizibukeze ukuze liqinisekise ukuthi ahambisana nesifiso sakho.

3. Nciphisa Imininingwane Yezisebenzi Ezibalulekile

Imininingwane inciphisa isilinganiso semininingwane edluliselwe kodwa futhi isebenza nakobani ongayifinyelela. Ukugcwalisa indima yayo kulawula ukungena okusekelwe ku-(RBAC) ukuze izisebenzi kuphela zomngane opholile odinga ibhizinisi elingokomthetho zikwazi ukubona noma ukuhlela imininingwane yomuntu siqu. Sebenzisa imishini yokuqinisekisa enamandla, njengokuqinisekisa okugcwele (MFA), kanye nokugcina ama-logi ayo yonke imizamo yokufinyelela. Zibukeze njalo izimvume zomsebenzisi kanye nokungena ngokushesha uma ilungu lezisebenzi lishiya iprojekthi noma indima.

Uma umsebenzi owenziwe ngaphandle kwe-injini uhilela ukusekela kwamakhasimende, qinisekisa ukuthi ama-intenet awakwazi ukubona imininingwane ephelele noma eminye imininingwane ezwelayo ngaphandle kokuba idingeka ngokuphelele. Itechnique enjengokufihla i-data noma ukugunyaza izimpawu ingathatha indawo yemininingwane yangempela ngezindinganiso ezingokoqobo kodwa ezingazwelani nemisebenzi eminingi esebenzayo.

4. Khomba Ukwaziswa Lapho Ukhululekile Futhi Udlulise

Ukubhala kungezinye zezilawuli zobuchwepheshe eziphumelela kakhulu zokuvikela imininingwane yomuntu siqu. Wonke ukwaziswa okudluliselwa phakathi kwenhlangano yakho nomngane osebenza naye ophumayo e-Ireland — futhi phakathi komngane nanoma yimuphi umkhandi ongaphansi kwe-STRAP — kungafihlwa kusetshenziswa i-protocol enamandla njenge TLS 1. I-data egcinwe kubaqondisi, izisekelo zemininingwane yemininingwane yekhompuyutha, noma i-seculo okumelwe ifihlwe ngokusebenzisa i-AESpreset noma i-aseculot kumele kusetshenziswa i-data efihliwe, ngokufanele imoduli yokhuseleko (HSM) noma i-ogadenti ye-opera ephethe isihluthulelo se-atmodensi (HSM).

Qinisekisa ukuthi umngane osebenza nombhali we-compass ubhaliwe ezimisweni zokubhala ngokufingqiwe futhi zingabonisa ukuvumelana nezindinganiso zemboni. Uma umnakekeli usebenzisa isisekelo sesizinda somphakathi esivela kumatheko anjenge-AWS, Microsoft Azure, noma i-Google Clock (konke kunezindawo ezinkulu zokwaziswa e-Ireland), kuqinisekiswe ukuthi ukukhomba oku-(papy) kwe-[[6] kwenziwe ngephutha futhi kunikezwa izihluthulelo zekhasimende. Izinkampani eziningi zase-Ireland zifaka lezi zilinganiso eziphambili; i-DPA yakho kufanele icacise ukuthi ngubani ophethe izihluthulelo ze-octivemo nezindlela ezisetshenziswayo.

5. Ukuhlolwa Kokuziphatha Kwasikhathi Sonke Nokuvivinywa

Inkuthalo ayisona isenzakalo esisodwa ngesikhathi esingu-66. Yakha amalungelo okuhlola i-DPA yakho kanye nesimiso sokubukeza ngezikhathi ezithile — okungenani ngonyaka — sokulawula komngane osebenza naye aphume. Lokhu kuhlola kungakwenziwa iqembu lakho siqu lokuhlola langaphakathi, isigaba sesithathu esizimele, noma ngesu eliqanjiwe. Kudingeka umnikezi ukuba agunyaze ukuhlola okuvamile kwezimiso zabo, imibhoshongo, kanye nezinhlelo zokuhlela eziqondisa ukwaziswa kwakho, futhi acele ukufushaniswa kwemishwana yamasu etholiweyo namasuwo okulungisa.

Ngaphezu kwalokho, khuthaza umngane ukuba athole i-Data Protection Impact Assessment (DPIA) yemisebenzi ethile oyihlelayo. Nakuba umlawuli ehlala enesibopho, i-PIA ehlangeneyo ingabona izingozi ezisheshayo futhi ibhalwe. I-ICO ne-DPC zombili zinyathelisa amakhate neziqondiso zokuqhuba i-DPPIA; ukuhlanganyela lezi nenkokheli yakho kungaqinisekisa ukufika okungaguquguquki.

Izindlela Ezingcono Kakhulu Zokuvikela Ukwaziswa Emisebenzini

Ukusebenza Kwesivikelo Esinamandla Senethiwekhi

Qiniseka ukuthi umngane ophumayo usebenzisa iziko lomlilo, ukuphambanisa/ukukhipha ijubane, kanye nemishini elondekile ukuze afinyelele kude. Izimiso ze-Segregate ukuze ukwaziswa kwakho kuhlukane nemininingwane yamanye amakhasimende. Lokhu kungafinyelelwa emafwini azimele noma ezisekelweni ezisekelweni ezinikezelwe. Uma umgcini-mabhande enikeza indawo ezungezile ehlukile, kuqinisekisiwe ukuthi ukuzihlukanisa okunengqondo kusendaweni ekuvimbeleni ukuvuza kokwaziswa okunemizwa.

Isoftware kanye nezinhlelo zivuselelwe

I-software engaphandle iyindawo evamile yokungena kwabahlaseli. I-DPA yakho kufanele idinge umngane ukuba agcine uhlelo lokulawula ukuchayeka okuhlanganisa ukubekwa kwasikhathi sinye kwezimiso zokusebenza, izinhlelo, nemitapo yesithathu epartid. Beka amathemba amaqoqo abucayi azakusetshenziswa ngaphakathi kwefremu yesikhathi esicacisiwe (umz., 48-72) kanye namaqoqo angeyona i-19672 okuhlola ukucushwa okungasetshenziswa emjikelezweni wanyanga wonke. Ukuxilonga okungaguquguquki okuhambisana nokubika okuzihambelayo kungasiza womabili amacala akhona aqaphele ukuma kwengozi kwamanje.

Ukuqeqesha Abaqashwa Ngesivikelo Sokwaziswa

Iphutha lomuntu lihlala lingenye yezimbangela eziphambili zokwephulwa kokwaziswa. Umsizi womshado kumelwe anikeze ukuqeqeshwa kokwaziswa okungafanele kubo bonke izisebenzi abaphatha i-data. Izihloko zokuqeqesha kufanele zihlanganise ukuqapha kokusiza, ukuphatha kahle ukwaziswa, ukuhlanzeka kwegama lokungena, ukubika izinqubo zokuphucwa kokwaziswa, nokubaluleka kwezimiso zokulinganisela ukukhubazeka kokwaziswa kanye nokulinganiselwa kwenjongo. Cabangela ukudinga isiqinisekiso saminyaka yonke sokuqeqesha njengengxenye yesivumelwano.

Misa Imithetho Yesinqumo

Naphezu kwemizamo engcono kakhulu, ukuphuka kungaqhubeka. I-DPA kufanele ichaze izikhawu ezicacile zesaziso se-gedfecture: ngaphansi kwe-GDPR, i-projekthi kumele yazise umphathi ngaphandle kokulibala okungafanele ngemva kokwazi ukuphulwa kokwaziswa kwakho. Inkampani yakho, njengomlawuli, inamahora angu 72 okukwazisa i-DPC ngaphandle kokuba ukuphuka akunakwenzeka ukuba kubangele ingozi kubantu ngabanye. Qiniseka ukuthi umgcini wesikhwama unecebo elihlanganisa ukuxazulula ngokushesha, ukuphenya, ukuxhumana nephuzu lakho elimisiwe lokuxhumana, nokulungisa. Khomba itafula phezulu nomngane wakho womsebenzi wonyaka owodwa nje ukuze uhlole ukuphumelela kwecebo.

Ukucatshangelwa Okwengeziwe Kweziphazamiso Zase - Ireland

Ukudluliswa Kokwaziswa Okungena eMbhoshongweni kanye nokudluliswa kweBrexit

Ngenxa yokuthi iRepublic of Ireland ihlala ikhona e-EU, ukwaziswa kudluliselwa kusuka enkampanini yakho kuya ku-Ireland ku-intra hieEU futhi akudingeki ukuba kuthunyelwe ezinye izinqubo (njenge-Standal Contractual Claus). Nokho, uma i-Ireland esebenzisa amaqembu amancane kakhulu asebenzisa i-millics ngaphandle kwe-European Economic Areace (EA), kumelwe uqinisekise ukuthi isivikelo esanele sisendaweni yanoma yikuphi ukuthunyelwa phambili. Lokhu kubaluleke kakhulu ezinkampani ezithembele kuma-Irish interlate commentation asekela amaqembu ezwe lonke eNdiya, ePhilippines, noma e-United States. Ifuna umngane ukuba agcine uhlu lwabo lwezonke izinhlangano ezingaphansi kanye kanye nokuhlola isisekelo esingokomthetho sokuthutha ngakunye.

Ngemva kweBreit, iNorthern Ireland isalokhu ihambisana nezici ezithile ze-GDPR, kodwa ihlukile ngokwegunya. Uma ilungiselelo lakho lokukhipha ukwaziswa lihilela ukunqamula umngcele ophakathi kwe-Ireland ne-Northern Ireland, hlola iseluleko somthetho ukuze uthole ukuthi kudingekile yini ukuvikela okwengeziwe.

Sebenzisa iMiyalo Yokubophezela ye-Corporate (BCR)

Uma inkampani yakho iyingxenye yeqembu lezizwe eziningi futhi i-Ireland isebenza ne-Corporate Religion, ungacabangela ukusebenzisa i-Corporate Rullate Rules (BCR) Umthetho we-BCR. I-BCR iyizimiso zokuziphatha ezivunyelwe yiziphathimandla ze-data zaseYurophu ezivumela ukudluliswa kweqembu lomniningomuntu ngaphandle kwezivumelwano ezingokomthetho. Nakuba inqubo yokuvuma ingathatha izinyanga, ama-BCRR inikeza uhlelo olubanzi lwesivikelo sokwaziswa phakathi kwenhlangano futhi ingalula ukudluliswa kwemisebenzi yezemisebenzi engaphandle phakathi kweqembu.

Isikhulu Sezokuvikela Imininingwane (DPO)

Ukuthi inkampani yakho iyadingeka yini noma cha ukuze ikhethe i-DPO, ehilela i-DPO isiqalo senqubo yokusebenza inezela ububonisi obubalulekile. I-DPO ingabukeza i-DPA, yeluleka nge-DEPA, futhi iqaphele ukulalela okuqhubekayo. Abaqondisi abaningi base-Ireland bane-DPO yabo; ukumisa umzila oqondile wokuxhumana phakathi kwe-DPO yakho ne-owabo kusiza ukuxazulula izindaba zomuntu siqu ngokushesha futhi kuqinisekise ukuchazwa okungaguquguquki kwezimfuneko ze-GDPR.

Ukuzilibazisa Nokuhluleka

Izivumelwano zokukhipha izivumelwano zivame ukuvuselelwa ngokuzenzakalelayo, kuholele ekwazisweni okugcinwe isikhathi eside kakhulu. Chaza kwi DPA inkathi eqondile yokugcinwa kwengxenye ngayinye yemininingwane yomuntu siqu, futhi ifuna umnakekeli ukuba asebenzise izinqubo zokucisha ezizenzekelayo noma abuye noma asuse ukwaziswa ngesicelo sakho lapho i-active i-octive i-octive. Ukuthola isitifiketi sokucisha uma inqubo iphelele. Lokhu akunciphisi ingozi kuphela kodwa futhi kusekela isimiso sakho sokugcina ukwaziswa esidingekayo ngaphansi kwe-GDPR.

Isiphetho

Ukuvikela imininingwane yomuntu siqu phakathi nebhizinisi le-Ireland akuyona nje indlela engokomthetho yokusebenza, i-CPR ayisona isici esiyinhloko sokuthembana nokuzinzisa. Ngokuqonda izibopho ze-GDPR ezibusa kokubili abalawuli nomphathi, ziqhuba ngenkuthalo efanelekile, zinikeza i-Programing Procementsting Procesting Procesting, futhi zikhiphe inqubo yokulondeka eqinile emikhankasweni yansuku zonke, izinkampani zingayinciphisa ngokuphawulekayo ingozi yokuphulwa kolwazi nesijeziso esilawulayo. Izihloko ezichazwe kulesihloko zinikeza isisekelo esiqinile, kodwa ibala lemininingwane ye-data ihlala ikhona. Zihlale zitshelwe ngokushintshwa kwe-Irish Detection Projective Comment ne-Thelitection Coutection Count yaseYurophu, futhi zibuye zinciphise amalungiselelo akho njalo ukuze ziqinisekise ukuthi zihlala zikhona futhi zisebenza.

Ekugcineni, ukuvikelwa kobuhlobo obuqinile kuzuzisa wonke umuntu: ukwaziswa kwamakhasimende akho kuhlala kuphephile, inkampani yakho igwema ukulimala okungokomthetho nokungokwezimali, kanti umngane wakho wase-Ireland wakha idumela lokwethembeka nenkonzo eyimfihlo. Zinike isikhathi manje sokubukeza izivumelwano zakho nezindlela zokuzivikela — ukutshala ukwaziswa kuncane kakhulu kunezindleko zokuphulwa.

[[UMTH:0] Imithombo yemali ye-External:[