As we are getting closer to the practical side of processing personal data under the GDPR, firstly we need to understand the reason of processing expressed in lawful basis. The first and most discussed basis is obviously a consent. Today we will identify the nature, characteristics and features of the consent needed to process personal Read more about GDPR – Consent part I.[…]
Now when we are familiar with GDPR principles and Rights of data subjects it is time to move on and uncover the content and territorial reach of GDPR. We will explain what data, systems and persons are protected by GDPR and who is bound to do so. GDPR applies to all contexts across all sectors. Read more about GDPR – Subject matter and scope[…]
Identity connectors are important part of any identity management (IDM) project. For an IDM solution the connector provide interface to the outer world. And there are few connectors that almost any IDM solution needs: LDAP, Active Directory and CSV. New versions of those connectors were released recently. And there is an interesting story behind those connectors. […]
This article is the last continuation of the GDPR principles series. In the previous articles you could read about the purpose limitation principle and data minimisation or accurancy and data retention periods. Now let’s learn about data security and Accountability. Data security Controllers are responsible for ensuring that personal data are kept secure, against both external and internal threats. This Read more about GDPR – Rights and principles III.[…]
Last article was devoted to the principles concerning controller’s duties. On contrary, today’s principles will express what data subjects may call for. Accuracy Personal data must be accurate and kept up to date, in other way it should be deleted or amended. So far nothing new in comparison with the Directive. The controllers must make Read more about GDPR – Rights and principles II.[…]
Today we will continue discovering GDPR principles by giving attention to two new principles introduced by GDPR. Both of them seem to be burdensome and restrictive for controllers, presenting their new duties and restraints. The purpose limitation principle The purpose limitation principle says the personal data collected for one purpose should not be used for Read more about GDPR – Rights and principles I.[…]
General data protection regulation (GDPR) is all about good management of identity data. And that is exactly what identity management (IDM) technologies do. Also, it is unlikely that GDPR compliance can be effectively implemented without any support from the technology. And that’s where IDM systems come in again. Overall, IDM technologies are almost perfect fit for GDPR compliance. But how exactly can identity management system such as our very own midPoint help with GDPR? […]
Many years have passed since the actual data protecting regime had been set. The technology is making huge steps and virtual environment is full of new threats. The personal data are of a great value in such environment. Therefore, the data protection deserves a proper attention. And GDPR should provide more safety. To understand any Read more about GDPR – The Evolution, not the revolution[…]
General Data Protection Regulation: a lot of people are already familiar with that. Much more people will have to get familiar with it quite soon. GDPR may be seen as a trouble and there is definitely a lot of work to be done for GDPR compliance. But, honestly, such regulation was bound to happen sooner Read more about GDPR and Identity Management[…]
G-D-P-R, these four letters might be causing you a headache, if you run a conscious business. GDPR brings some difficult obligations on scene and it is about time to start with preparations. If you care about the data protection, you surely dealt with it already or at least considered the processes improving privacy in your organization. Read more about GDPR – Ready or not, here I come[…]