Every business gathers information about staff and customers, but certain information is considered personal, and is subject to regulation by privacy laws. In 2014, a disgruntled Morrisons employee leaked contact details for customers and staff. The company was fined because it violated privacy laws. The privacy laws of many countries which include the EU’s General Data Protection Regulation (GDPR) employ this definition of personal data.
This includes information about an individual’s actions, habits and relationships that can be used to identify them. Names and addresses, emails addresses, and telephone numbers can all be used to identify an individual, as well as videos, photos, and recordings of conversations between your employees and customers. The GDPR also demands that you safeguard sensitive personal data and makes disclosure and consent mandatory.
sensitive data is considered to be more susceptible to misuse, which is why it receives greater protection under various global privacy laws. This could include health, biometric, or political affiliation information. You must obtain an explicit, unambiguous agreement prior to processing sensitive information. The degree of protection required will depend on the laws of your jurisdiction.
You may require an inventory of your computers, laptops and digital copiers to find out where you keep personal information. You should examine the file cabinets and computer systems as well as home computers, mobile devices, flash drives and other equipment utilized by your employees. You should also consider the personal information your company receives from third parties and suppliers.
http://www.bizinfoportal.co.uk/2021/02/12/advantages-of-a-business-information-portal/
