Hva er informasjonssikkerhet

Personvern internett
The term ‘personal data’ is the entryway to application of the Data Protection Basic Regulation and is characterize in Art. 4 para. 1 no. 1. Personal dossier are all information which is akin to an identified or identifiable natural person.

Informasjonssikkerhet
Those impacted are identifiable if they can be identified, especially using assignment to an identifier such as a name, an identifying number, location data, an online identifier or one of several special characteristics, which expresses the physical, physiological, genetic, mental, commercial, cultural or social identity of these natural persons. In practice, these also include all data which are or can be assigned to a person in any kind of way. For example, the telephone number, credit card or crew number of a person, account data, number plate, appearance and consumer number or address are all personal data.

Hva er personopplysninger
Since the definition includes “all information,” one must assume that the term “personal data” should be as broadly interpreted as possible. This is also found in case law of the Court of Justice of the European Union. These include also less-clear information, such as recordings of work times which include information about the time when an employee create and ends his work day, as well as breaks or times which do not fall in work time. Also, written answers from a test-taker and any remarks from the test about these answers are “personal data” if the test-taker can be theoretically identified. The same also applies to IP addresses. If the processor has the legal option to oblige the provider to announce additional information which can identify the user who is behind the IP address, this is also personal data. In extension, one must note that personal data need not be objective.

Continue Reading →

Posted in: Uncategorized

GDPR og Datatilsynet

Under GDPR organizations in breach of GDPR can be fined up to 4% of annual global turnover or ¬20 Million (whichever is greater).
This is the maximum fine that can be imposed for the most serious infringements e.g.not having sufficient customer consent to process data or violating the core of Privacy by Design concepts.

Personvern internett
There is a tiered approach to fines e.g. a company can be fined 2% for not having their records in order (article 28), not notifying the supervising authority and data subject about a breach or not conducting impact assessment.
It is important to note that these rules apply to both controllers and processors — meaning ‘clouds’ will not be exempt from GDPR enforcement.

Eu personvern
Processing personal data is generally proscribed if it is not expressly allowed by law, or the impacted persons have not consented to processing these data. The approval of those whose personal datais collected, processed and/or used puts the persons in the position to be able to dispose of their personal rights.

The basic obligation for the effectiveness of valid legal consent ar outlined in art. seven of the GDPR and fixed more in recital thirty two. This should be granted for a concrete case when adequate data is provided to the person concerned and should be clearly communicated. The person distressed should be a real selection for the approval to be voluntary.

For more data on how to be sure you are in compliance with the new law, visit Eu personvern

Continue Reading →