Sapose organisasion blon yu em kam underneath lon dispela discripsion wei em tok antap, em nau stap underneath lon lekal obligasion lon em lon compli waintiam GDPR. Dispela GDPR save putim bigpela focus lon ol documentasion wei ol infomasion kontrola mas keepim lon deminstratim ol accountabiliti blon ol. Complianse waintaim olgeta key arias bai requirim organisasion blon yu lon reviewim approach blon em lon governanse na lon wanem hap em bai managim infomasion protecsion olsem wanpela coporate isu. Onpela aspek blon dispela em lon reviewim ol contrak na ol arapela arrangmen yu gat taim yu sahring infomasion waintaim ol arapela organisasion.
Dispela ovaview highlightim dispela GDPR key thems lon helpim yu lon understandim dispela lekal framwok insait lon EU. Em blon husait save karim aut responsibiliti lon infomasion protecsion lon olgeta dei.
Husait em dispela GDPR save appli igo lon em?
- Dispela GDPR em appli igo lon ol ‘kontrolas’ na ‘procesors’. Ol kontrola save took lon wanem hap na lon wanem as pesonal infomasion em processim na ol procesor save actim lon laik and komand blon ol kontrola.
- Sapose yu wanpela procesor, dispela GDPR em placim wanpela specific lekal obligasion lon yu; kain olsem, yu em ol requirim lon maintainim recods blon pesonal infomasion na processim activiti. Yu bai gat bigpela na moa lekal liabililti sapose yu wokim asua. Dispela ol obligasion blon procesor em ol newpela requirmen underneath lon GDPR.
- Tasol, sapose yu kontrola, yu tu ino nap stap malalo lon obligasion blon yu wei procesor em invlove – dispela GDPR placim ol moa obligasion lon yu lon mekim sua contrak blon yu waintiam procesor em compli waintiam GDPR.
- Dispela GDPR appli igo lon ol wok processim wei organisasion em carrim aut taim operat insait lon EU. Dispela em appli lon orgnisasion autsite lon EU wei em save offerim ol guds na servis igo lon ol manmeri insait lon EU.
- Dispela GDPR em ino save appli igo lon ol sampela activiti olse processim wei Law Enforcmen Direcktive em coverim, processim blon ol nasional securiti na processim wei ol manmeri carrim aut base lon pesonal/haushol activiti.
Wanem kain infomasion em GDPR save applim go lon em?
Pesonal infomasion
Dispela GDPR em save appli lon ol ‘pesonal infomasion’. Tasol, dispela GDPR definision blon em moa detail na mekim klia olsem infomasion kain olsem online identifia – eg wanpela IP adress – gen constitutim pesonal infomasion. Dispela bigpela stret definision em providim tripela range blon pesonal identifia lon constitutim pesonal infomasion, reflectim sanis lon technologi na lon wei organisasion em collectiminfomasion lon ol pipol.
Lon plenti organisasion, keepim HR recods, customa list, o contak detail etc, dispela em sanisim definision wei em mekim liklik practikal diferense. Yu can asumim olsem sapose yu holim infomasion wei stap insait lon skop blon DPA, em bai tu stap insait lon skop blon GDPR.
Dispela GDPR appli igo lon automated pesonal infomasion na lon manual filim systim wei pesonal infomasion em ol save acessim lon ol specifik critiria.
Pesonal infomasion em save bin pseudonymise – eg key-cod – em stap insait lon skop blon GDPR wei em depen lon wanem ol hap em hat lon attributim dispela pseudonym igo lon wanwan man or meri.
Sensitiv pesonal infomasion
Dispela GDPR em save referim igo lon ol sensitive pesonal infomasion olsem “spesal categori blon pesonal infomasion” (Lukim Artikle 9).
Lon kain olsem, dispela spesal categori em specificali includim genetic infomasion, na biometrik infomasion wei taim ol processim, em save identifyim ol man o meri lon unique wei stret.
Pesonal infomasion em lon ol kriminal convicsion na offense wei em ino includim, tasol wainkain extra safgard appli igo lon procesim blon em (lukim Aritkle 10).