Jaunā Eiropas Savienības personas datu aizsardzības regula teju ikvienā uzņēmumā kļūst par arvien apspriestāku jautājumu, jo tās spēkā stāšanās termiņš (2018.gada 25.maijs) strauji tuvojas. Tādēļ jau ceturto gadu pēc kārtas, sadarbojoties ar “Latvijas Sertificēto Personas Datu Aizsardzības Speciālistu Asociāciju”, viens no vadošajiem kiberdrosības uzņēmumiem Baltijā “Data Security Solutions” 26.aprīlī rīko Latvijas lielāko personas datu aizsardzības regulas pasākumu (EU GDPR - General Data Protection Regulation) “Digitālā Ēra 2017”, kurā vadošie speciālisti no privātā un valsts sektora dalīsies pieredzē un zināšanās, aplūkojot jaunākos un inovatīvākos risinājumus, kā arī jaunākās tirgus tendences un regulatīvās normas kā Latvijā, tā visā Eiropas Savienībā. Vairāk: https://digitalaera.dss.lv/

1. wARS
dAtAregula rebellion awakening
Jedi
Artjoms Krumins

3. 3 m`in definitions
Personal Data
Data Processing
Data Breach

4. Personal data
any information relating to an
identified or identifiable
natural person (‘data subject’)
ARTiCLE 4, DEFinitions

5. HoW ARe we identified
Direct factors:
• Name, Surname
• Personal iD
• Geolocation data
• Mobile device EMEI
• iP address
• Credit card number
iNDirect factors:
• physical,
• physiological,
• genetic,
• mental,
• economic,
• cultural
• or social identity

6. DaTa PRoCESSiNg
any operation or set of operations
which is performed on personal data or
on sets of personal data, whether or
not by automated means
ARTiCLE 4, DEFinitions

7. EXAMPLES
• collection,
• recording,
• organization,
• structuring,
• storage,
• adaptation or alteration,
retrieval,
• consultation,
• use,
• disclosure by transmission,
• dissemination or otherwise making
available,
• alignment or combination,
• restriction,
• erasure or destruction

8. DaTa BREACH
a breach of security leading to the
accidental or unlawful destruction,
loss, alteration, unauthorized
disclosure of, or access to, personal
data transmitted, stored or otherwise
processed
ARTiCLE 4, DEFinitions

10. Cio
operations
officier
Legal
They don’t talk to each other

11. You must
unlearn,
what you
have learned
Magister Yoda

12. There are thousands of
personal data in your
company

13. You have only
30 days to react

14. 72 hours
The controller should notify the
personal data breach to the
supervisory authority without undue
delay and, where feasible, not later
than 72 hours after having become
aware of it

15. Where to seek
for help?
• Audit
• Processes
• Data discovery
• Security
• Education

16. 25.05.2018

17. Artjoms Krumins
ALSo Latvia
Let the force
be with you