Difference between revisions of "GDPR"

Latest revision as of 19:38, 6 February 2019

GDPR

Date: Monday, 14 January 2019 from 7:00pm to 9:00pm iCal
Meetup Event: https://www.meetup.com/NetSquared-Kitchener-Waterloo/events/255516932/
Location: *** Room 1300 *** -- Conrad Grebel University College, 140 Westmount Rd. N., Waterloo, Ontario Map
Event Announcement: GDPR/Announcement 2019-01-14

Does your Non-Profit organization collect personal data on people? People in Europe? And what is Personal Data anyway? Does your organization have an office in Europe? Store data in Europe? Process data in Europe? What is the General Data Protection Regulation (GDPR)? Does it apply to your organization? What policies does your organization need to have? What technical measures need to be in place? What's the SysAdmin's role in all this? Could a SysAdmin be liable?

Marc Paré will provide us with an overview of the GDPR, and outline some of the concerns for Non-Profit SysAdmins.

--Marc Paré & Bob Jonkman

GDPR/Meeting Notes 2019-01-14

@@ Line 14: / Line 14: @@
 --Marc Paré & Bob Jonkman
-==== Talking Points ====
-* General Data Protection Regulation (GDPR)
-** European Commission
-*** set the GDPR standards
-** Data Protection Agencies (DPA) (e.g. Information Commissioners Office ICO in the UK)
-*** In charge of administering the GDPR in their respective countries
-** In force as of 25 May 2018
-*** all sites must adhere to GDPR except any personal websites
-** Types of data
-*** clear reason for data collection
-** Consent
-*** requires use of positive opt-in consent and NOT pre-ticked consent or use of double-opt-in
-*** requires site's statement of consent must be clear and explicit
-**** cannot re-purpose consent to another statement
-*** user ability to remove consent should be easily accomplished
-*** requires storage of consent for possible future audit trails
-** Data Storage
-*** clear defined use and length needed to store information
-*** storage of personal data for longer if you are only keeping it for public interest archiving, scientific or historical research, or statistical purposes
-*** data collection must be necessary
-** Types of data collection groups (2)
-*** Controllers and Processors
-** Data Protection Officers (DPO)
-*** individual in charge of data storage and adherence/ompliance to GDPR
-*** DPO must be independent, an expert in data protection, adequately resourced, and report to the highest management level
-*** DPO may be shared amongst multiple organizations
-*** you must appoint a DPO if
-**** your site requires large scale tracking
-**** you are a public authority or body
-**** your site collects data on criminal convictions/offences
-==== Resources ====
-* [https://www.zdnet.com/article/dutch-government-report-says-microsoft-office-telemetry-collection-breaks-gdpr/ Dutch government report says Microsoft Office telemetry collection breaks GDPR | ZDNet]
-** Investigators said they've identified the "large scale and covert collection of personal data" through Office's built-in telemetry collection capabilities.
-::They said Microsoft engages in this telemetry collection covertly and without properly informing users.
-::The report said investigators didn't find any official documentation about what information Microsoft collects through Office and no way of turning Office telemetry off, raising a serious privacy concern for all current Office users, regardless of geographical location.

Difference between revisions of "GDPR"

Latest revision as of 19:38, 6 February 2019

GDPR

Navigation menu

Search