Table of Contents
Eminyakeni yamuva nje, i-Ireland iye yathola ushintsho olukhulu emsebenzini oqhelile, ikakhulukazi kwezobuchwepheshe obuchumayo nezinkonzo zezinkonzo zezezimali. Nakuba lolushintsho lunikeza ukuvumelana nezimo nezinzuzo ezisebenzayo, luletha futhi izinselele ezinkulu zokuvikela ukwaziswa. Ukuvikela ulwazi lomuntu siqu nolwenkampani ngaphandle kwendawo ezungezile elawulwayo yehhovisi kuye kwaba yinto ebaluleke kakhulu. Njengoba amalungiselelo omsebenzi aqhelile eba yinto ehlala njalo ezinhlanganweni eziningi, amabhizinisi ase-Ireland kumelwe ahambe ngezindawo eziyinkimbinkimbi zezibopho zokulawula, izinto zobuchwepheshe, kanye nezici zabantu ukuze aqinisekise ukulondeka kanye nezindaba zokwaziswa.
Ukuqonda Imithetho Yokulondoloza Ukwaziswa E - Ireland
I-Ireland, njengelungu le-European Union, isebenza ngaphansi kwe-General Data Protection Regation (GDPR), eyaqala ukusebenza ngo-May 2018. I-GDPR imisa indinganiso ephakeme yesivikelo semininingwane, igcizelela ukulandisa, ukubonakala, namalungelo omuntu ngamunye. Isebenza kunoma iliphi inhlangano ehlela imininingwane yomuntu siqu wezakhamuzi ze-EU, kungakhathaliseki ukuthi isekelwephi inhlangano. Izinkampani zase-Ireland ezinezisebenzi ezikude, ukuvuma akuyona imfuneko esemthethweni ethwala izijeziso eziphawulekayo zokungabhaliswanga. Amagugu angafinyelela ku-4% yezindawo eziguqukelayo emhlabeni wonke noma izigidi ezingu-520, nomaphi lapho zikhona.
I-Irish Data Protection Commission (DPC) iyigunya lesizwe eliphethe ukuphoqelela i-GDPR e-Ireland. I-DPC iphenya ngenkuthalo ukuphulwa nesiqondiso sezindaba ngokuvumelana. Ngaphezu kwalokho, i-Ireland inemithetho yayo siqu yasekhaya, i-DS Protection Act 2018, eyongezela i-GDPR futhi inikeza eminye imithetho, ikakhulukazi ngokuphathelene nokugcinwa komthetho kanye nokukhulula abantu abathile.
Izimo ezikude zomsebenzi ziveza ukucabangela okuqondile kwe-GDPR. Ngokwesibonelo, isimiso sokululaza ukwaziswa sidinga ukuba kuphela ukwaziswa komuntu okudingekayo kuqoqwe futhi kuhlelwe, kodwa izimiso ezikude zidinga ukuqoqwa kokwaziswa okwengeziwe kokuhlola noma kokuphatha amathuluzi. Ngokufanayo, isimiso sokulondeka esifanelekile [1] kuba nzima ukugcwalisa uma ukwaziswa kudlula ngemibhoshongo yasekhaya nangamathuluzi omuntu siqu. Izicelo zemininingwane yokungena komniningo (DARS) ziba yinkimbinkimbi futhi kakhulu uma izisebenzi zisebenza kude, njengoba izinkampani zidinga ukuqoqa ukwaziswa okulondekile ezimisweni ezabelweyo.
Ukuqonda lemithetho kuyisinyathelo sokuqala. Izinhlangano zase-Ireland kumelwe ziguqule izimiso zokuqondisa zibe izivikelo ezisebenzayo ezisebenza ngaphandle kwe-ofisi engokwesiko. Ukuze uthole ukucaciswa okubanzi kwezimfuneko zeGDPR, vakashela GDPR.eu.
Izinselele Eziyinhloko Ekuvikelweni Kwemininingwane Ekude E - Ireland
Indawo ekude yomsebenzi yandisa ukuhlasela ngenxa yokuqhekeka kokwaziswa futhi yenza kube nzima ukuthobela imithetho. Izinselele zingena ezigabani ezintathu ezibanzi: ukumelana kobuchwepheshe, izici zomuntu, nezithiyo ezilawulayo.
Izinga Lobuchwepheshe
Izisebenzi ezikude zivame ukuthembela ezinhlanganweni zasekhaya zeWi-Fi, ezingase zingabi nako ukulondeka okukhulu kwemisebenzi yezezisekelo zenkampani. Ukumiswa kwemizila ehambayo, imishini engekho efekthrini, kanye nokuhlanganyelwa kwezinhlelo zenethi yomphakathi kungadalula ukwaziswa ekunqandeni. Ngaphezu kwalokho, izisebenzi zivame ukusebenzisa imishini yazo siqu (i-BOD) engase ingabe ingena mishini yokulawula ibhizinisi. Lemishini ingangenwa nge-wareareor-mare noma ixhumele ku-Wi-Fi (umz.z. ezitolo zokudayisa ikhofi), izingozi eziyanda ngokwengeziwe.
Ukudluliselwa kokwaziswa kulelo qophelo eliphansi. Ngaphandle kokusetshenziswa okuphoqelelwe, ukwaziswa okuthunyelwa phakathi kwezisebenzi nezinhlangano kungahamba kungafihlwa. Nakuba izinkonzo eziningi zamafu ziphoqelela ukuvulwa kokuvulwa kwemisebe ekuthuthweni nalapho kuphumile, ukuhlelwa kwemikhondo kungashiya ukwaziswa kusobala. Ukuphakama kwesithunzi ITY / Abasebenzi abasebenzisa izinhlelo ezingagunyaziwe noma izinkonzo zokuvikela okungagunyaziwe okungagunyaziwe. Okugcina, ukulondeka okungokomzimba okunjengengozi yensimbi noma ukulahleka kukhuliswa lapho ama-traptop kanye nemishini yeselula kuthathwa ngaphandle kwehhovisi.
Izici Zomuntu
Abaqashwa abasebenza kude bangase bangalandeli isiyalo sokuphepha esifana nesehhovisi eligadelwe. Inhlanzeko ye-password ingaphela, futhi ikhona izimpawu ezikhona noma amagama angenamandla avamile. Ukuhlasela komphimbo kwanda phakathi nobhadane futhi kuhlale kungusongo. Izisebenzi ezikude zingawela kakhulu ekwakheni ubuchwepheshe bezenhlalakahle ngoba zingedwa futhi zingase zingafinyeleli ngokushesha ku-IT.
Enye inselele yomuntu ukunamathela ngokungefani ezimisweni zokuvikela ukwaziswa. Uma izisebenzi zihlanganyela ama-creens phakathi nokuhambelana kwe-vidiyo, zishiya amaphepha ekhamera, noma zishicilela izinto ezizwelayo ekhaya, ingozi yokudayiswa ngengozi kwemininingwane iyanda. Ngaphezu kwalokho, ukufinyezwa kwemingcele yomuntu siqu neyobuchwepheshe kusetshenziswa i-imeyili yomuntu siqu emsebenzini, ukugcina amafayela kuma-akhawunti womuntu siqu emafwini . /acan aholela ekulahlekelweni kwemininingwane noma ekungahlangani kwezimiso zokugcina imininingwane.
Ukungaqondisi okulinganiselwe kwabaqashi nakho kunengxenye ezingozini zomuntu. Ngaphandle kokuqapha ngokuqondile noma izimiso zokuhlola eziqinile, kunzima ukuqinisekisa ukuthi kulandelwa izinqubo zokusingatha ukwaziswa. Nokho, ukuqapha ngokweqile kungangqubuzana namalungelo ezisebenzi zomuntu siqu ngaphansi kwe-GDPR, kubangele ukulinganisela okuntekenteke.
Izithiyo Ezilawulayo Neziwukuphikelela
Umsebenzi okude wenza kube nzima ukuhambisana ne-GDPR ngezindlela eziningi. Ukuthunyelwa kokwaziswa emingceleni kuya ngokuya kuvela lapho izisebenzi zisebenza emazweni ahlukene. Ngisho nakumazwe ahlukene, isidingo sokubonisa ukuthi izivikelo ezifanele zikhona kuyo yonke imisebenzi yokulungisa kuba yinselele. Izinhlangano kumelwe zilondoloze amarekhodi emisebenzi yokulungisa (ROPAS) abonisa ngokunembile amalungiselelo emisebenzi aqhelileyo ."Umsebenzi ongakhubazeka uma ungathengwanga ukugcinwa kuse kufike enkathini.
I-Failing Data Protection Assessments (DPIA) yamathuluzi amasha omsebenzi noma izinqubo zivame ukunganakwa. Ngaphansi kwe-GDPR, i-PIS iphoqelekile uma ukulungisa kuphumela engozini enkulu kubantu ngabanye. Ama-platfomu amaningi akude okubambisana ne-software yokuhlola i-software yehlela kulengxenye. Ukuhluleka ukuphatha i-DEPI kungaholela ekuhlolweni nasekunhlengweni.
Esinye isithiyo siphathelene nokuphuka kokwaziswa. Umsebenzi okude ungabambezela ukufihlwa nokubikwa. Uma isisetshenziswa sesisebenzi sihlehlisiwe, isenzakalo singathatha izinsuku eziningi singaqashelwa. I-DPPR idinga isaziso ku-DPC phakathi namahora angu-72 ukuba iqaphele ukuthi igebese, futhi ukubambezela kungaphumela ekujezisweni. Isimo esisakazwayo samaqembu akude senza kube nzima ukuhlanganisa isenzakalo esiphumelelayo.
I-DPC yase-Ireland ibilokhu isebenza kakhulu ekuqinisekiseni i-GDPR emongweni wemisebenzi ekude. Ukuze uthole isiqondiso esiningiliziwe ngokuvumelana namathemba, hlola i-website ye-' yokuvikelwa kwe-data ye-Irish Commission'. [[FLT: 1]]
Amasu Okunqoba Izinselele Zokuvikelwa Kwemininingwane
Ukusingatha le zinselele kudinga indlela ehlelwa kabanzi ehlanganisa ukuphathwa kwezobuchwepheshe, izimiso ezicacile zokuhlela, ukuqeqeshwa okuqhubekayo nokuphenywa njalo. Izinkampani zase-Ireland kufanele zivumelanise la masu nezindlela zazo ezizozifaka engozini kanye nezomsebenzi ezikude.
Abalawuli Bobuchwepheshe
Ukusetshenziswa kombhalo ofingqiwe oqinile kusekelwe. Yonke imininingwane ekuthutheni kufanele ibhalwe ngokuyimfihlo ngokusebenzisa i-TLS noma imithetho efana nayo. Ukusetshenziswa komgunyaziso ekungeneni kwemithombo yezebhizinisi kuqinisekisa ukuthi imishini yokudlulisa ithunjwa ngokuphephile. Ukuqinisekiswa kweminingi (MFA) kufanele kudingeke kuwo wonke ama-akhawunti abasebenzisi, ikakhulukazi ekufinyeleleni kokuqondisa nasekungeni ekungeneni ekubusweni. I-MFA ngokuphawulekayo kunciphisa ingozi yokuthatha i-akhawunti ngisho noma u-password encitshisiwe.
Izindlela zokuvikela imishini zibalulekile ezisetshenziswayo. Izinhlangano kufanele zithumele i-software etholakele ephethe isiphelo kanye nempendulo (EDR), ziqikelele ukuvala njalo, futhi zisebenzise ukuphathwa kwemishini kamnyakazo (MDM) ukuphoqelela izimiso zokuvikela kwi-BHOD noma imishini elawulwa yinkampani. Ukufakwa kwe-imfihlo ngokuphelele kuzo zonke izithonsi nakumathuluzi ahambayo kuvikela imininingwane uma isisetshenziswa esilahlekile noma sebiwe. Ingxenye yenethiwekhi inganciphisa ukuqhuma komsindo uma isisetshenziswa esikude sesahlehlisiwe.
Izinkonzo zamafu alondekile kumele zibe inqubo yokugcina nokusebenzelana. Amathuluzi anjenge Microsoft 365, i-Google Coloval, noma ama-platform alondekile avame ukwakha-ama-creatects alalelayo. Nokho, izinhlangano kumele zilinganisele la mathuluzi ngokunembile “‘ukuvimbela ukulahleka kwe-data (DLP), ilinganisela izinhlelo zehele ngokuhlanganyela kubasebenzisi abagunyaziwe, nokusebenzisa ama-albhu okubhalisa umsebenzi. I-data e-aciner, ezinye izinyathelo ezinjengokuphatha amalungelo nokuphawula amanzi kungavimbela ukwabiwa komthetho.
Izimiso Zenhlangano
Kucacile, izimiso ezigunyaziwe ziwumgogodla wohlelo lwesivikelo semininingwane olukude. I-A Regitive Usease Policy (AUP) kufanele ichaze ukuthi yiziphi izisetshenziswa zomuntu siqu kanye nezinhlelo ezivunyelwe, ukuthi iziphi izinqubo ezingagcinwa endaweni, nezindlela zokubika izenzakalo zokuphepha. Inqubo futhi kumelwe ikhulume ngokuphepha okungokomzimba, ifuna izisebenzi ukuba zivale izihenqo, izisetshenziswa ezilondekile, futhi zigweme ukusebenza ezindaweni zomphakathi ezinokwaziswa okuzwela.
Lethani i-OurSCP (BOD) imithetho ye-our Screens (i-BYOD) icacile ngelungelo lenhlangano lokusula ukwaziswa kwenkampani emshinini othathelwa ukulahlekelwa noma ukulahlekelwa. Abaqashwa kudingeka baqonde ukuthi imfihlo yabo ivikelekile, kodwa ukulondeka kwemininingwane yenkampani kuyaqala. Ngokufanayo, isimiso somsebenzi esikude kufanele sigunyaze ukusetshenziswa kwe-Wi-Fi (izimpompo eziphephelayo) futhi ifuna ukuba i-meternet yemishini iboshwe ngamathusi aqinile kanye nokushintshwa okuqinile.
Izimiso zokuhlela imininingwane zisiza izisebenzi ukuba zinqume indlela yokusingatha izinhlobo ezihlukahlukene zokwaziswa. Ngokubiza ukwaziswa ngokuthi kuwumphakathi, umphakathi, imfihlo, noma imingcele, izisebenzi zingasebenzisa izixwayiso ezifanele. Ngokwesibonelo, ukwaziswa okulinganiselwe akumelwe kugcinwe ezimishinini ezizimele noma emithonjeni engaqondakali. Ukuphoqelelwa komthetho wobuchwepheshe okungasekelwa ngemishini ezenzekelayo lapho kungenzeka, njengemithetho ye-DLP evimbela noma exwayisayo uma ukwaziswa okuzwelayo kuthunyelwa ngaphandle kwenhlangano.
Amasu okusabela okungacubunguli kumelwe avuselelwe ukuze kubonakale amaqiniso angokomsebenzi. Lokhu kuhlanganisa ukuchaza ngokucacile iziteshi zokubika (jengesibonelo, i-24/7 yocingo olushisayo noma i-inthanethi), izinqubo zokuqoqa i-osensic zindlela ezingase zenziwe kude. Ukuvivinya ithebula njalo kuhlola ukuphumelela kwecebo nokuhlukanisa amagebe.
Ukuqeqesha Nokuqaphela
Abaqashwa bayindlela yokuqala yokuzivikela, kodwa futhi bawuphawu olubuthakathaka kakhulu uma bengaqeqeshiwe kahle. Ukuhamba, ukuqeqeshwa kokuqapha nge-inthanethi kufanele kuhlanganise izihloko ezinjengokuqashelwa komsebenzi, imikhuba engcono kakhulu, ukuvikela inqubo ethile yomsebenzi eqhelile, nezimiso ezithile zokuvikela ukwaziswa zenhlangano. Ukuqeqesha kufanele kube yisibopho kubo bonke izisebenzi ezikude futhi kuqaliswe okungenani ngonyaka, nemibhoshongo eyengeziwe lapho kuvela izinsongo ezintsha.
Ukulingisa kungaba indlela ephumelelayo yokuqinisa ulwazi. Amathuluzi amaningi avumela izinhlangano ukuba zithumele ama-email afanayo kanye nomzila ochofozayo. Imiphumela ingasetshenziselwa ukuhlomisela abantu abasengozini okunye ukuqeqeshwa. Kubalulekile ukwakha isiko lapho izisebenzi zizizwa zikhululekile ukubika amaphutha ngaphandle kokwesaba isijeziso, ngoba ukubika ngokushesha kokuqhekeka kwenza ukuxazululwa ngokushesha.
Ngaphandle kokuqeqeshwa okuvamile kokuphepha, izisebenzi kufanele ziqonde imithwalo yazo yemfanelo ngaphansi kwe-GDPR. Lokhu kuhlanganisa ukuqaphela ukuthi iziphi izici zokwaziswa komuntu siqu, ukwazi indlela yokuphatha i-DSAR, kanye nokwazi iziqondiso zokusetshenziswa kokwaziswa okungokomthetho. Ukuqeqesha okucacile kwalabo abaphatha izigaba ezikhethekile ze-data (umz., ulwazi lwezempilo noma lwemali) nakho kuyatuseka.
Ukuqeqesha kodwa akwanele; kumelwe kusekelwe impucuko eqondile yokulondeka. Abaholi kufanele babonise ukuziphatha okuhle, bakhuthaze imibuzo, futhi baqaphele izisebenzi ezibika izihloko zezindaba. Amaphephabhuku okuphepha, amacebiso, noma izigqebhezana (izinto ezivamile noma ezinyathelisiwe emahhovisi emakhaya) kungagcina isivikelo sokwaziswa sibalulekile engqondweni.
Ukubambisana Nokuphishekelwa
Ukuze ziqinisekise ukunamathela okuqhubekayo ekuvumelaneni nomthetho we-GDPR ne-Ireland wokuvikela ukwaziswa, izinhlangano kumele ziqhube ama-'pistle' avamile. Ama-'pie''a'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''', i-memovessss mee, isssssssssssssssssssssssmeoop', nokunamathela ezimist. Ababhekisweni bemininingwaneni bemininingwane bemininingwaneni be-data. Ababheki be-data bangaphandle noma abaqondisimeo okwazi ukunikeza umbono wabo ngokwabo.
Ukugcina amarekhodi anembile emisebenzi yokulungisa (ROPAs) akuyona into engenziwa ngokuzithandela. Kumsebenzi okude, lokhu kusho ukubhala wonke amathuluzi namaplatfomu asetshenziswayo, uhlobo lwe-data ehlelwe, isisekelo esingokomthetho sokulungisa, nanoma isiphi i-roPAs i-odar yomnyango we-operal. ROPAS kufanele ivuselelwe noma nini ithuluzi elisha lomsebenzi owenziwe ekude liqala.
I-DPC kufanele iqondiswe noma iziphi izimiso ezintsha zomsebenzi ezikude ezihlanganisa ukugadwa kwezisebenzi (umzk., ukulandelela i-software yomkhiqizo) noma ukuhlolwa kwenqwaba enkulu yokwaziswa okuzwelayo. Inqubo ye-PICA isiza ekuboneni izingozi zisheshayo futhi zisebenzise izindlela zokuzilungisa. I-DPC inikeza ama-endix kanye nesiqondiso sokuphatha i-DPISC.
Okokugcina, izinhlangano kufanele zimise i-Datal Protection Government (DPO) uma idingeka ngeSiphakamiso 37 se-GDPR (iziphathimandla zomphakathi, ukugada okuhlelekile, noma ukuhlelwa kwesilinganiso esikhulu kwemikhakha ekhethekile). Ngisho noma kungabophekile, ukuba ne-DPO noma iqhawe le-data elivikelayo lingasiza ekuqondiseni imizamo yokuvikela i-DPC futhi lisebenze njengendawo yokuxhumana ne-DPC.
Ukubona Ikusasa Ngenjongo Yokuzivikela Emsebenzini Wase - Ireland Okude
Umsebenzi okude awuwona ukuthambekela kwesikhashana; izinkampani eziningi zase-Ireland ziye zathatha izifekethiso ezizozimela. Njengoba ubuchwepheshe buzivelela, ngokufanayo nezinselele namakhambi okuvikela ukwaziswa. Ukuhlakanipha kokwenza nomshini kakade kusetshenziselwa ukuzwa izimo ezingezinhle futhi kuphendule ekusongeleni ngesikhathi sangempela. Nokho, i-Al ngokwayo iphakamisa imibuzo emisha yokuvikela ukwaziswa okuzokwenziwa ngomshini kanye nobandlululo.
I-Irish DPC kulindeleke ukuba iqhubeke isebenza ngokusemthethweni, igxile ezimpikiswaneni zomsebenzi ezikude. Izinqumo zamuva ziveze ukubaluleka kwezimiso ezifanele zokudlulisa ukwaziswa (umz., i-Contractive Claus) nesidingo sokulandisa okungalawuleki. Amabhizinisi kufanele abheke isiqondiso se-DPC futhi acabange ukuzihlanganisa namaqembu ezimboni njenge-Irish Computer Society ukuze ashicilelwe.
Ukuklanywa kwe-tro Trust kuyatholana. Ngaphansi kwendlela ye Zero Trust, akukho sisetshenziswa noma umsebenzisi othenjwa yiphutha, kungakhathaliseki indawo. Isicelo sokungena siqinisekisiwe, sigunyaziwe, futhi sibhalwe ngokukhowudiwe. Lendlela ivumelanisa nomsebenzi obuqamama ngoba isusa umqondo wenethiwekhi enelungelo ngaphakathi. Ukufihlwa kwe-Troit Trust kudinga ukugcinwa kokwaziswa kokuphathwa, ukumiswa kwamagciwane, nokulandelelwa kokugcinwa okuqhubekayo, kodwa kunganciphisa inciso enqanyusweni.
Intuthuko yokulawula emkhathizwe ihlanganisa ukuhlelwa kwe-ePrivgation ehlongozwayo, okuzoguqula imithetho yezokuxhumana ngogesi, kanye nokushintshwa kwe-GDPR ngokwayo. I-Commission yaseYurophu i-Dalorance Act ne-Data Act ingaba nemiphumela yokuthi i-data ihlanganyelwa kanjani futhi isetshenziswe futhi iphinde isetshenziswe. Izinhlangano zase-Ireland kufanele zihlale zinolwazi ngemithombo enjenge- Yuranian Union for Cybersecurity (ISA).
Ekuphetheni, ukuvikelwa kokwaziswa endaweni yomsebenzi eqhelile e-Ireland kuyinselele enzima edinga ukusebenza ngokuqhubekayo. Ngokuqonda indawo elawulayo, ukuxoxa ngobuchwepheshe nokweqisa kwabantu ngamacebo aqinile, nokuhlala zivumelana nezinguquko zesikhathi esizayo, izinkampani zase-Ireland zingavikela kokubili imininingwane yazo nedumela lazo. Ukusetshenziswa kwesivikelo esiqinile akuyona isibopho esingokomthetho kuphela kodwa futhi kuwumncintiswano emkhakheni wezomnotho wezobuchwepheshe oyandayo.