Companies collect information about their employees and customers. However certain information is personal and therefore subject to privacy laws. For instance, when a disgruntled employee at UK supermarket chain Morrisons published the contact lists of staff and customers in 2014, the business was fined for violating the privacy law. The privacy laws of many countries that include the EU’s General Data Protection Regulation (GDPR) employ this definition of personal data.
This includes information on an individual’s habits, activities and connections that can be used to identify them. Names address, addresses, email addresses, and phone numbers can all be used to identify a person as well as photographs, videos, as well as audio recordings of conversations with your employees and customers. The GDPR also requires you to safeguard sensitive personal information and it imposes specific disclosure and consent requirements on it.
sensitive data is considered to be more susceptible to misuse, and therefore is given greater protection under many global privacy laws. This can include health, biometric, or political association information. You usually need express unambiguous and unambiguous consent to process sensitive information and the level of protection you must afford it will depend on the laws in your jurisdiction.
You may need to keep an inventory of your computers, laptops and digital copiers in order to determine where you store personal information. You should examine the cabinets for files and computer systems as well as home computers, flash drives, mobile devices and other equipment that your employees use. You should also take into consideration the personal information your business receives from third party and suppliers.
Cidades atendidas |
São Paulo/SP |
Guarulhos/SP |