Businesses collect information on their employees and customers. However, some of this information is personal and therefore subject to privacy laws. In 2014 an unhappy Morrisons employee leaked contact details for customers and staff. The company was fined as it had violated privacy laws. Many privacy laws around the world that include the EU’s General Data Protection Regulation (GDPR) employ this definition of personal data.
This includes information about an individual’s activities, habits and associations that can be used to identify them. For example, a person’s name, address, phone number or email address can be used to identify people and also photos, videos and voice recordings of conversations with your employees and customers. The GDPR also requires you to protect sensitive personal information and it imposes specific disclosure and consent requirements on it.
Sensitive data is viewed as more prone to misuse, and so is granted more protection under a variety of global privacy laws. This may include health, biometric, or political associations information. You will need to obtain explicit, unambiguous and clear consent prior go to these guys to processing sensitive information. The degree of protection required will depend on the laws that govern your state.
You might need to take inventory of all computers, laptops digital copiers, as well as other equipment within your company to determine the locations where personal data is stored. You should check file cabinets and computer systems as well as home computers mobile devices, flash drives and other equipment that your employees use. Also, you should consider the personal information your company receives from third party and suppliers.