Practical Methods of Implementation for the Indispensable Mechanism of GDPR Compliance

• Autorzy: Michał Bańka , Tomasz Soczyński , Dariusz Wasiak
• Języki publikacji: EN

Abstrakty

EN

New quality that has been delivered by the provisions of General Data Protection Regulation (GDPR) (EU) 2016/679 is intended to secure a higher level of safety for personal data processing operations. The following elaboration was produced as an attempt to address the questions regarding practical methods of implementation for the indispensable mechanism of GDPR compliance. The guidelines contained in the article are supposed to be helpful in enhancing the safety level for processed personal data. Theoretical and legal studies over the status and functioning of the valid legislation with reference to the practical application of personal data processing procedures have been applied in the article. The main sources of knowledge included valid legal acts, opinions from Article 29 Working Party, technical norms as well as available general knowledge. The outcomes of the said studies indicated the complexity of the issue and established the necessity to continue further studies in practical implementation methods, such as the national and European mechanism of certification or sector codes of good practices.(original abstract)

Słowa kluczowe

EN

Personal data protection; Data security; Data processing; Act of personal data protection

PL

Ochrona danych osobowych; Bezpieczeństwo danych; Przetwarzanie danych; Ustawa o ochronie danych osobowych

• Czasopismo: Wroclaw Review of Law, Administration & Economics
• Rocznik: 2021
• Tom: 11
• Numer: nr 2
• Strony: 31--47

Twórcy

autor

Michał Bańka

• Warsaw University of Technology Warsaw, Poland

autor

Tomasz Soczyński

autor

Dariusz Wasiak

• Wyższa Szkoła Bankowa we Wrocławiu

Bibliografia

• Abrahams N., Griffin J., Privacy law: The end of a long road: Mandatory data breach notification becomes law (2017) 32 Law Society of NSW Journal.
• Alhazmi O. H., Malaiya Y.K., Assessing disaster recovery alternatives: On-site, colocation or cloud. Software Reliability Engineering Workshops (ISSREW), 2012 IEEE 23rd International Symposium on. IEEE.
• Chakraborty N., Intrusion detection system and intrusion prevention system: A comparative study (2013) International Journal of Computing and Business Research.
• Drozd O., Privacy pattern catalogue: A tool for integrating privacy principles of ISO/ IEC 29100 into the software development process IFIP International Summer School on Privacy and Identity Management (Springer, Cham 2015).
• Fortiş T.-F., Munteanu V. I., Topics in cloud incident management (2017).
• Humphreys E., Implementing the ISO/IEC 27001: 2013 ISMS Standard (Artech House 2016).
• Ma Jun, et al., The application of Chinese wall policy in data leakage prevention. Communication Systems and Network Technologies (CSNT), 2012 International Conference on. IEEE.
• Maldoff G., The risk-based approach in the GDPR: interpretation and implications' IAPP https://iapp.org/media/pdf/resource_center/GDPR_Study_Maldoff. pdf.
• Malviya R., Umrao B. K., Machine Learning Security' (2014).
• Purohit B., Singh P.P., Data leakage analysis on cloud computing (2013) 3.3. International Journal of Engineering Research and Applications.
• Routray R.R. et al., Method and system for automated integrated server-network-storage disaster recovery planning U.S. Patent No. 8,121,966. 21 Feb. 2012.
• Setiawan A., Wibowo A., Susilo A. H., Risk Analysis on the development of a Business Continuity Plan Computer Applications and Information Processing Technology (CAIPT), 2017 4th International Conference on. IEEE.
• Sloan R. H., Warner R., How Much Should We Spend to Protect Privacy?: Data Breaches and the Need for Information We Do Not Have (2017).
• Sobel W. E., McCorkendale B., Restoration of backed up data by restoring incremental backup (s) in reverse chronological order U.S. Patent No. 7,802,134. 21 Sep. 2010.
• Verheul E., Jacobs B., Polymorphic encryption and pseudonymisation in identity management and medical research (2017).
• Yod-Samuel M., Kung A., Methods and Tools for GDPR Compliance Through Privacy and Data Protection Engineering 2018 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW).

Identyfikatory

DOI

https://doi.org/10.2478/wrlae-2021-0013