Lapho izinhlangano zase-Ireland zithumela ukwaziswa komuntu siqu emazweni angaphandle kwe-European Economic Area (EEA), kumelwe ziqondise i-processing Processing Accouncition (DPA) iyincwadi eyisisekelo elawula ukudluliswa okunjalo, iqinisekisa ukuthi ukwaziswa kuyasingathwa ngokuvumelana ne-General Data Protection Regation (GDPR). Lesi sihloko sinikeza isiqondiso esibanzi sokuqonda i-DPA ekudluliseni ulwazi lwase-Ireland, ukuhlanganisa izimfuneko zomthetho, amalungiselelo ayisisekelo, kanye nezinyathelo ezisebenzayo zokulalela.

Siyini Isivumelwano Sokwaziswa Esihlelayo?

Isivumelwano se-DPA sokuhlela i-processing Active Actrinition esibophayo ngokomthetho phakathi komlawuli wemininingwane kanye nomqondisi we-data. Ngaphansi kweSiphakamiso 28 se-GDPR, umlawuli kumelwe asebenzise kuphela abaqondisi abanikeza isiqiniseko esanele sokusebenzisa izinyathelo zobuchwepheshe nezikahulumeni. I-DPA ihlela lezi zibopho futhi ibeke amagama okuthi ngaphansi kwalawo imininingwane yomuntu ingahlelwa ngaphansi komlawuli.

Kumaqembu ase-Ireland, i-DPA ibaluleke kakhulu uma ukuthungatha i-DPA kuhilela ukudluliselwa kwemininingwane yomuntu siqu e-Ireland ukuya ezweni lesithathu (indawo engaphandle kwe-EEA). Ukuthunyelwa okunjalo kungenzeka lapho kusetshenziswa izinkonzo zamafu e-United States, kusetshenziswa isikhungo sokushayela eNdiya, noma ukusebenzisa ipulatifomu lokuthengisa engekho e-EA. I-DPA kumelwe ikhulume kokubili izibopho ezivamile zokulungisa kanye nezimo ezithile zokuthutha kwezizwe ngezizwe zonke.

Kubalulekile ukuhlukanisa iDPA nesivumelwano senkonzo esivamile. Nakuba isivumelwano senkonzo sihlanganisa amagama entengiselwano (imali, amazinga enkonzo, impahla yolwazi), i-DPA iyi-appendix yokwaziswa elawula ngokucacile indlela imininingwane yomuntu siqu ephathwa ngayo. Ezimweni eziningi, i-DPA ifakwa njengesimiso sesivumelwano esiyinhloko, kodwa kumelwe isayiniswe yizo zombili izigaba ukuze iqiniswe.

Isakhiwo Esingokomthetho Sokudluliswa Kwemininingwane Yase - Ireland

Isisekelo esingokomthetho sokudlulisela imininingwane yomuntu siqu eIreland kumazwe esithathu sibekwe kwiSahluko V seGDPR (Artles 44-49). I-Ireland, njenge-EU ext State, inamathela ngokugcwele kwi-GDPR, ne-Irrish Data Protection Commission (DPC) iyigunya eliyinhloko. Njengoba iBrexit, i-United Kingdom manje iphathwa njengezwe lesithathu ngaphansi kwe-GDPR, nakuba i-EUPK Trade ne-Cooperation Revolution inikeza i-data yesikhashana igemga yokwenziwa kwe-mshini.

Isimiso esiyinhloko seSahluko V ukuthi ukudluliswa kungavela kuphela uma umlawuli nomphathi bezinhlelo bevumelana nezimo ezibekwe kuyi-GDPR. Ngokuqondile, ukudluliswa kumelwe kusekelwe kwenye yezinqubo ezilandelayo:

  • Isinqumo sokungafundi se-European Commission, siqinisekisa ukuthi izwe lesithathu liqinisekisa izinga elanele lokuvikelwa kokwaziswa (umz., iJapane, iNingizimu Korea, i-UK ngaphansi kwelungiselelo le-interim).
  • [[NTL:0] Appropriatiate scheme [, ehlanganisa i-Contractive Claus (SCC), Ukuxhumanisa Imithetho ye-Corporate (Izi-CR), noma isimiso sokuziphatha esivunyelwe.
  • Ukukhetha izimo ezithile [ (umzk., imvume ecacile, isidingo sokwenza isivumelwano, izithakazelo ezibalulekile). Ukugweba kuncane futhi akufanele kusetshenziswe njengendlela yokudlulisa evamile.

Ngemva kwe [[NTL:0] Schrems II [ ukwahlulela (20), iNkantolo yoMahluleli ye-European Union (CJEU) yenza i-passion ye-Scheme ye-Schebsesment yaze yamisa izimfuneko ezengeziwe zokudluliswa kwe-SCC. Izinhlangano kumelwe manje ziqhube i-Intelligence I-active Assesment (TIA), futhi lapho kudingekile, zisebenzisa izilinganiso zokuqinisekisa izinga elilinganayo lesivikelo ezweni eliya kulo.

Izici Eziyinhloko Zesivumelwano Sokwaziswa Esihlelayo

I-DPA eqinile kumelwe ihlanganise zonke izici ezifunwa yi-GDPR 28(3) ye-GDPR, kanye nezigaba ezengeziwe ezikhuluma ngokudluliswa. Ngezansi kunesici ngasinye esiyinhloko esiphunyukile.

1. Indaba yendaba nesikhathi sokuhlela

I-DPA kumelwe ichaze ngokucacile indalo, injongo, kanye nesikhathi sokusebenza. Lokhu kuhlanganisa ukuchaza izigaba zokwaziswa komuntu siqu okuhlelwayo (jengesibonelo, amagama, amakheli e-imeyili, ukwaziswa okungokwezimali, imininingwane yempilo) kanye nezigaba zezihloko zemininingwane yokwaziswa (umz., amakhasimende, izisebenzi, izivakashi zewebhusayithi). Isikhathi okumelwe sihambisane nesivumelwano senkonzo esingaphansi, kuhlanganise namalungiselelo okucisha ukwaziswa noma ukubuya lapho kuqedwa.

Imvelo Nenjongo Yokuzihlela

Uma ubhala iziqondiso zomlawuli, umqondisi angase enze ngokuvumelana neziyalezo ezibhalwe phansi ezivela kumlawuli. Noma ikuphi ukuthatha indawo okungaphezu kwenjongo echazweyo (isib., ukusebenzisa ukwaziswa kwekhasimende kumshini ozihlomisayo) kudinga imvume ehlukile noma isisekelo esingokomthetho.

3. Izibopho Namalungelo Abaqondisi

I-DPA kufanele iqinisekise izibopho zomlawuli ngaphansi kwe-GDPR noma ikakhulukazi umsebenzi wokuqinisekisa isisekelo esingokomthetho sokulungisa nokuzisa izihloko zemininingwane. Ibonisa nesibopho somphathi sokusiza umlawuli ekufezeni imisebenzi yakhe, njengokusabela ezicelweni zokungena kokwaziswa (DSAR) noma ukwabisela umlawuli wemininingwane yomuntu siqu.

4. Izinyathelo Zokuphepha Imininingwane

ISiphakamiso 32 sidinga kokubili umlawuli nomshini wokwenza inqubo yokusebenzisa izinyathelo zobuchwepheshe neziqu ezifanele. I-DPA kufanele ibhale uhlu lwezimiso zokuvikela eziqondile (umzk., ukukopisha okuyimfihlo lapho kuphumile nalapho kuhanjiswa, ulawulo lokungena, ukufakwa kwamagama, ukuhlola okuvamile kokuzivikela). Izinhlangano zase-Ireland zikhiphela umgcini wamafu, lengxenye kumelwe ichaze i-crective yomgcini we-msekeli (ISO27001, SOC 2, njl.) kanye nezinqubo zokusabela.

5. Ukusetshenziswa kwama - “transplacession ”

Uma i-DPA ihlose ukuhlanganisa enye inhlangano (i-processor engaphansi) ukuze iphathe ukwaziswa kwayo, i-DPA kumelwe ichaze inqubo yokugunyazwa. Ngokuvamile, umlawuli kumelwe anikeze imvume eqondile noma isigunyazo esibhaliwe esingokomthetho esingokomthetho esinelungelo lokusenza ushintsho. Umqondisi wenqubo kumelwe aphumele phansi izibopho ezifanayo zokuvikela i-data kubaqondisi be-practicesss ngokusebenzisa isivumelwano. Lokhu kubaluleke kakhulu uma i-sting [6]coptionshoper esendaweni yesithathu-at kudinga izivikelo zokudlulisa.

6. Ukudluliswa Kwamazwe Ngamazwe

Uma i-processor noma umqondisi ongaphansi engaphandle kwe-EEA, i-DPA kumelwe imise indlela yokudlulisa ixhomeke kuyo. Uma usebenzisa i- Standard Contractical Claus (SCCs), inguquko yamuva (2021), kufanele ijongwe. i-DPA futhi idinga umqondisi wokwazisa umqondisi ngaphambi kokudlulisela ukwaziswa endaweni engahlanganisiwe sinqumo sokudlulisela ulwazi, nokubambisana ekuqhubeni u-Assesment Assionment.

7. Imininingwane Ekhuluma Ngamalungelo

Umqondisi kumelwe asize umlawuli ekugcwaliseni izicelo zokusebenzisa amalungelo okwaziswa (kwesokudla sokufinyelela, ukuhlanganisa, ukuvimbela, ukuvimbela, ukugcinwa, ukwenqaba). I-DPA kufanele ichaze izikhathi zokuphendula, imishini yokuxhumana, nesibopho somphathi wemishini ukuba azise umlawuli wanoma isiphi isicelo esiqondile esisendabeni semininingwane.

8. Isaziso Sokushintsha Kwemininingwane

Emdlalweni wesephu sokwaziswa komuntu siqu, umqondisi wezinhlelo kumelwe azise umlawuli ngaphandle kokulibala okungafanele (phakathi kwamahora angama-24-48). I-DPA kufanele ichaze ukwaziswa okumelwe kunikezelwe yi-processor (ukuqhekeka kwembobo, izigaba ezithintekile, imiphumela, izinyathelo zokulungisa). Khona - ke umphathi kufanele abike i-DPC uma kudingeka.

9. Imikhankaso Nokuhlola

Umlawuli unelungelo lokuhlola ukuvumelana kwe-processor. I-DPA kufanele ivumele ukuhlolwa noma ukuphenywa okuzimele, ikwazi ukuqaphela nokufihla imfihlo. Izindikimba zomphakathi zase-Ireland, izibopho ezengeziwe zokubona ngalé kwenkululeko yolwazi zingasebenza ngaphansi koMthetho we-Free of Information Act.

10. Ukunqamuka Kwemisho Nokwaziswa Ukubuya Noma Ukulahlekelwa

Ekupheleni kwenkonzo yokulungisa, umqondisi wendlela kumelwe, ekhethwe ngumlawuli, abuye wonke ukwaziswa komuntu noma akususe, ngaphandle kokuba i-Union noma i-Atmetrion idinga indawo yokugcina. I-DPA kufanele ichaze isikhathi (umz., phakathi nezinsuku ezingu-30) futhi idinge ukuba ithuswe.

Izinyathelo Ezinezelwe Zokuthunyelwa Kwamazwe Ngamazwe: Schrem II Nangalé Kwalo

Kusukela [[NTL:0] Schrems II [ isinqumo, iDPA emane ihlanganisa i-SCCs ayisanele. Izinhlangano kumelwe zihlole ukuthi uhlelo olungokomthetho lwezwe elifikela lunikeza isivikelo esifana kakhulu. Lokhu kwenziwa nge-Expact Assesment (TIA), okumelwe kubhalwe njengengxenye yenqubo ye-DPA.

I-TIA ihlola imithetho nemikhuba yezwe lesithathu, kuhlanganise nemibuso yokuhlola, ukungenela kweziphathimandla zomphakathi, nokulungisa amazahlulelo. Uma kutholakala amagebe, izinyathelo zokunezela kumelwe zisetshenziswe. Izinyathelo ezivamile zokunezela zihlanganisa:

  • Izindlela zobuchwepheshe: i - end prochecropy, i - psective, noma izimpawu ezivimbela lowo ozozithola ukuba afunde ukwaziswa ngaphandle kwesihluthulelo somlawuli.
  • Izimiso ezingokomthetho: izimiso zangaphakathi eziqinile, izinombolo ezigunyaza ukutholakala kukahulumeni ngaphandle kwesisekelo esingokomthetho, nezibopho zokubonana.
  • Izinyathelo ezifanelekile: zathuthukisa ama - SCC ngezibopho ezengeziwe, njengesaziso esiqondile sezicelo zokungena ezicelwa iziphathimandla zakwamanye amazwe.

Ngo-2023, i-European Commission yamukela isinqumo esisha sokungafundi kwe-EU-US Data Bymfistry Framework (DPF). Izinhlangano zase-Ireland zidlulisela ukwaziswa e-US ezifakazelwe ngaphansi kwe-DPF zingathembela kulolo phahla esikhundleni se-SCC. Nokho, abagcini bamafu abaningi base-US abakaqiniseki, futhi ama-SCCC ayaqhubeka enziwa ngendlela elungile. I-DPC iye yakhipha isiqondiso se-TIAology futhi ilindele ukuba abalawuli be-TIA As agcine i-TIA ngaphansi kokubukezwa okuvamile.

Imikhuba Emihle Kakhulu Emihlanganweni Yase - Ireland

Ukuze kuqinisekiswe ukuthi kuvumelana kakhulu neDPAs nemithetho yokudlulisa ukwaziswa, izinhlangano zase-Ireland kufanele zamukele le mikhuba elandelayo:

Ukuba Nenkuthalo Ngokuphelele

Phambi kokusayina i-DPA, hlola ukuma komlondolozi we-operator. Ukucela amakhophi ezimiso zayo zokuzivikela, imibiko yokuhlola imibiko, iziqinisekiso (ISO 27701, SOC 2 Type II), kanye nanoma yimuphi umlando owephulwe ngaphambili. Uma i-projekthi isekelwe egunjini eliphezulu le-"%risk, hlela ukubukezwa okungokomthetho kwemithetho yokuhlola yendawo. Le ntshiseko efanelekile kumelwe ibhalwe futhi ibukezwe njalo.

Sebenzisa Isimiso Esivamile Se - European Commission U - Claus (2021)

Ama-2021 SCCC abizwa ngokuthi ama-modral (deltoŕtótóprocessor, umqondisi-processor 31:tosub highprocessor, njll.) futhi ahlanganisa izigaba ezithile zokuthunyelwa kwezizwe zomhlaba. Afuna futhi ukuba amaqembu aqede “ukwaziswa okuthuthukisayo” okuhlelwa kwemininingwane, izinjongo, kanye nezivikelo. Gwema ukusebenzisa ama-SCC amadala ngaphandle kokuba umshini ukhululwe (ukukhululwa okuncane kwezivumelwano okuphethwe ngaphambi kuka-7-September 2021, okumelwe kuthathelwe indawo ngo-7 December 2022.)

Ukugcwalisa Indawo Eyinhloko Yokulondoloza I - DPAs

Gcina i-DPAs ibhaliwe, kuhlanganise nosuku olusayiniwe, izinkonzo ezihlanganisiwe, izinqubo zokudlulisa, nosuku lokuphelelwa. Lokhu kuhlola kusiza i-ARCM Profester Provice (DPO) ukuba iqaphele ukugcinwa nokuvuselelwa kwezinhlelo. Isekela futhi izibopho zokulandisa ngaphansi kweSiphakamiso 30 (i-projected yemisebenzi yokulungisa).

Ukuqeqesha Abaqashwa Nezisebenzi Eziboshiwe

Amaqembu alungisayo, abaphathi, nezeluleko zomthetho kumelwe baqonde izimfuneko zeDPA. Qedela ukuqeqeshwa kokubona ukuthi iDPA idingeka nini (umzk., lapho uqasha umthengisi omusha we-software osebenza ngemininingwane ye-proxy), nendlela yokuxoxa ngemisho eyinhloko. I-Embed DPA i-DPA i-odating group.

Bukeza Njalo Futhi Uvuselele I - DPA

Uma imisebenzi yokulungisa ishintsha – ngokwesibonelo, kuqoqwa uhlobo olusha lokwaziswa, kunezelwa i-symbossoptor engaphansi kwe-sandroprocessor, noma i-processor isusa ama-server ayo – i-DPA kumele ishintshwe. Beka umjikelezo ovamile (ngokuvamile) ukuqinisekisa i-DPA ibonisa isimo samanje esingokoqobo nentuthuko engokomthetho (umz., izinqumo ezintsha zokuthatha iziqalisi, izinqumo zeCJEU).

Ihlangene nenkambiso yokuvikela idata

Uma umshini wakho uhlela imininingwane yenhlangano ongase ubangele ingozi enkulu kubantu ngabanye (umz., isilinganiso esikhulu sokuhlelwa kwemitapo ekhethekile yokwaziswa), kungadingeka uqhube i-data Protection Impact Assessment (DPIA) ehlanganisa izici zokudluliswa. I-DECA ne-TIA ingahlanganiswa. Uma kungathandabuzwa, funa ukuhlanganiswa ne-DPC – lokhu kubaluleke kakhulu ekudluliseni kwezindlela ezintsha.

Amaphutha Avamile Nendlela Yokuwagwema

Ngisho nezinhlangano ezinolwazi ziyangena eDPAs ukuze zithuthwe kwamanye amazwe. Nakhu amaphutha avamile namakhambi awusizo:

  • [[NTL:0] Ukuhlanganisa ama-DPA njenge-khizane ibhokisi lokuvivinya. I-DPA ejwayelekile ekopishwe kombangi ingaphuthelwa izimfuneko ze-Irish [1] project, njengesidingo sokubhekisela ku-DPC njengegunya eliholayo. Fix:[ I-DPA embonisweni ethile, indawo yenqubo, nezigaba zemininingwane.
  • Ibhekisele ku-SCC kuphela ngaphandle kwe-TIA. I-DPC ilindele ukubona i-TIC ebhaliwe, noma yikuphi ukudluliswa okusekelwe ku-SCCC. [ Fix: Sebenzisa i-European Data Protection Board’s (EPB) Isilinganisi se-TIA esikhona kuwebhusayithi ye-DPC.
  • Ifuna umenzi wemishini. I-processocter engaphansi ezweni lesithathu umlawuli angaliqapheli. Fix:[ Ufuna umqalisi wokugcina uhlu olungaphansi lwe-[FLT] lwe-processolutions futhi athole imvume yomlawuli wesivumelwano ngasinye esisha.
  • Ukuhamba ngokulandelana kwemephu yemininingwane. Uma ungazi ukuthi umniningo ulungiswa kuphi ngempela, awukwazi ukuqinisekisa i DPA imbobo yokudluliswa. Fix:[ qhuba ibalazwe lokuhlola i-methari ye-data ngaphambi kokuxoxa nge-DPA. Quka nezisekelo zemininingwane yamafu, ukufinyelelwa okukude ngenkomba yokusekela, kanye nesisekelo sokwaziswa.
  • Ukuveza amalungiselelo okuqeda. Ama-DPA amaningi antula izinyathelo ezicacile zokubuya komniningo noma ukucisha uma isivumelwano siphela. Fix:[ Cacisa uhlelo lwemininingwane ebuyisiweyo (umz., i-CSV, i-fish-hele efihliwe), indlela yokucisha (ukubhala, ukubhujiswa okungokoqobo), kanye nomkhawulo wesikhathi.

Isiphetho

I-DPA efakwe ngokusemthethweni ayiqinisekisi nje kuphela izihloko ze-GDPR kodwa futhi yakha ukuthemba abathengi kanye nama-reguralting Agreements. Ibone isisekelo sokudluliswa kwezindawo ezingokomthetho ezisemthethweni ezizweni zonke ze-Irish. Schrems II [i-US US US AFLEX Activeworkworkworky (i-i-i-PR) kanye ne-UK's Prefr estimulations i-sss stances stoms stoms i-'s's's's, ibhekise i-'inquisime ngokuqhubekayo, ngokusebenzisa i-SCCC, ihambisa ama-ACPPPP, DPA, futhi i-D-offsendroggss asebenza ngokuphepha ngokuphepha-mthetho e--tiriccultive, amabhizinisi e-ish, ama-data e-Arive, ama-aric.