Today, I read a sentence that said something like that disability data remain high data although in certain circumstances they apply the basic level. Gentlemen: What is higher-level file or treatment. The figure, no.
A fact of disability is a health data, and consequently, a specially protected data, as provided in Art. 7 of the Data Protection Act (which refers to security measures, but the need to obtain consent for treatment enhanced).
Since we are talking about security measures, are not you tired of some limited compliance with the Data Protection Act to implement safety measures? What bothers me is scared to the database manager saying this "because if it comes the Agency and have not seen such a thing, you sanctions."
I invite you to do me the following reflection: A tale of what will be the Agency an SME that is dedicated to canning peppers in Don Benito to see if they change the passwords for access to the administrative computer? If the agency gets to that end would have to give some of these circumstances:
- you decide to do an inspection of the craft sector canned peppers. Official inspections usually result in a document of recommendations and disciplinary proceedings are not open to the inspected enterprises.
- because someone has reported to the company for a specific reason. In this case, the agency usually sends a letter requesting information concerning the events complained of (eg: document security, etc ...) or stating that goes to people for inspection in the offices that day. Come on, that if they hear the doorbell of his house at six in the morning is the milkman, no Monsieur le Directeur.
irritates me to hear in the working meetings "if the agency is" Agency inspectors are not angels of death that run through Spain, with black trench coats, looking for companies that punish. Typically, those who say this do not know the existence of Act 30/92 and anything that makes the AEPD in administrative proceedings seems a mystical act and inexplicable.
I am preparing a study on sanctions AEPD for infringement of art. 9 of the Data Protection Act to see if they become aware that some do not get penalties because a company has no record of incidents, but because contracts in a container displayed publicly. The next one they tell you that if you have implemented such a measure can penalize Agency, have a resolution to punish a company for that very reason. 0 Tolerance to sell CrecePelo!
Another thing that bothers me is the advice of lawyers with membership number of 10 digits, they tell me to put disclaimer.
I am preparing a study on sanctions AEPD for infringement of art. 9 of the Data Protection Act to see if they become aware that some do not get penalties because a company has no record of incidents, but because contracts in a container displayed publicly. The next one they tell you that if you have implemented such a measure can penalize Agency, have a resolution to punish a company for that very reason. 0 Tolerance to sell CrecePelo!
Another thing that bothers me is the advice of lawyers with membership number of 10 digits, they tell me to put disclaimer.
I do not pay services of the information society and realize processing of data capable of being included within the scope of the Data Protection Act. First, this blog does not result in any economic activity for the owner, who uses this platform to provide professional services of any kind (the kind you're thinking, either.) Not include either advertising, or even reversed an indirect benefit curricular purposes: it is anonymous. I write a personal blog, not professional. Incidentally, I speak of issues for which others charge, but imagine that I devoted a post on models of aircraft ...
On the other hand, and for the same reasons, any data processing is performed, enter into a domestic activity. In conclusion, all contained in Ad Edictum is a warning here do not give professional advice or services clients, recommended to consult an attorney for such things.
If we picky, I would say that providers of information society are not required to include a "legal notice", but to provide certain information on its website (on their person, home, etc. ... or on the products they sell, whether pursuant to LSSICE, law and consumer users or the sale at a distance). That information need not be called "legal notice" nor refer to issues such as links, intellectual property, use of trademarks or waiver of any virus, etc ...
And now if you excuse me, I'll take my pill .
0 comments:
Post a Comment