Security and management of personal data in accordance with legal requirements
Determine scope of law and find out how much you comply with it’s requirements
Get qualified advice, evaluate control effectiveness, and draw up an action plan
Introduce pragmatic and effective control mechanisms, which are in line with existing risks
In the first stage of complying with personal data security regulations, a company needs to know what personal data it processes. Identify all communication channels from which it receives and / or sends data. Based on this process, the company needs to create a data inventory and assess privacy risks.
Once the data has been identified, redundant and outdated information should be deleted. The data should be classified and the following should be determined:
The purpose for which this data is being processed
After determining the volume and purpose of the personal data required by the company, data processing rules should be developed. Rules should be documented and shared across the company. Data processing risks should also be assessed and the responsibility of the data protection officer should be defined, who will monitor the compliance of the data processing within the organization with the requirements set by the regulation.
The company is obliged to take organizational and technical measures to ensure the protection of data from accidental or illegal destruction, alteration, disclosure, extraction, and any other illegal activity.
The security measures taken will cover issues such as:
At BDO Digital, Anzor is the head of Digital Advisory that combines cyber and information security, RPA (Robotic Process Automation) and Data laboratory departments.
BDO Consulting LLC, a Georgian limited liability company, is a member of BDO International Limited, a UK company limited by guarantee, and forms part of the international BDO network of independent member firms.
BDO is the brand name for the BDO network and for each of the BDO Member Firms.
