GDPR and Policies Flashcards
What does GDPR stand for?
General Data Protection Regulation
What year is the Data Protection Act?
2018
What does GDPR do?
Regulates the ethical use, processing and storage of PI
GDPR impacts the safe use of data by:
Setting 7 principles for handling personal data
Why must you comply to GDPR?
- Avoid fines ๐ฐ
- Avoid reputation damage ๐
3 examples of 7 principles of GDPR?
- Up to date/Accurate ๐
- Process data lawfully, transparently and fairly ๐ฎโ
- Data minimisation only collect data necessary for intended purpose โ
What are the 3 main policies in JLP for data?
Data Privacy Policy
Info sec policy
Data management policy
What does the data privacy policy do?
ensures we adhere to GDPR
What does the Info Sec Policy do?
- Protects Information Assets
๐ - Ensures confidentiality and integrity ๐ค
What does the data management policy do?
ensure we govern the use and management of our data
How do you meet the internal policies?
- Classifying data ๐
- Ensure no PII ๐
- Security classification applied ๐ฎโ
- Type of access understood๐
How can you improve the internal standards?
- Ensure relevantโ
- Audits/assessments to understand gaps and effectiveness ๐
- Data Driven Culture and Education ๐