Electric.ie July/August Edition

ELECTRIC.IE • The Magazine & Website for the Irish Electrical Industry • 51 Industry News •—‡†‘›‹•ƒ–‹‘ A process to make personal data no longer attributable to a single data subject without the use of additional data. Additional data must be separate to ensure non- attribution. ”‹˜ƒ…› „› ‡•‹‰ The inclusion of data protection from the onset of designing of systems, rather than an addition/ afterthought. ”‹˜ƒ…› ’ƒ…– ••‡••‡– A method of identifying and reducing privacy risks for individuals when undertaking new projects handling personal data. ‹‘‡–”‹…ƒ–ƒ Data that enables the ‹†‡–‹Ƥ…ƒ–‹‘ ‘ˆ ƒ †ƒ–ƒ •—„Œ‡…–Ǥ It can include behavioural and physical characteristics of that person e.g. facial image. …”›’–‡† †ƒ–ƒ The protection of personal data through technological measures to ensure that data is only accessible/readable by those with appropriate permission. ‘” ˆ—”–Š‡” ‹ˆ‘”ƒ–‹‘ ’Ž‡ƒ•‡ ˜‹•‹– –Š‡ ƒ–ƒ ”‘–‡…–‹‘ ‘‹••‹‘‡”ǯ• ™‡„•‹–‡ Š––’•ǣȀȀ™™™Ǥ†ƒ–ƒ’”‘–‡…–‹‘Ǥ‹‡Ȁ †‘…•Ȁ Ȁͦͣ͢͡ǤŠ– ……‘—–ƒ„‹Ž‹–› This is a new principle under GDPR and means that organisations must have clear documentation and recording procedures in place to prove that your organisation meets the required standards. ƒ–ƒ ”‡ƒ…Š A breach of security leading to the destruction, loss, alteration, unauthorised disclosure, of or access to, personal data. ’‡…‹ƒŽ ƒ–‡‰‘”‹‡• ‘ˆ ‡”•‘ƒŽ ƒ–ƒ Data concerning the racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation of an individual. ƒ–ƒ ”‘–‡…–‹‘ ƥ…‡” A representative for the data controller/data processor who oversees data protection compliance and is a data privacy expert. Under GDPR, not all organisations have a requirement to appoint a Data Protection ƥ…‡”Ǥ ƒ–ƒ —„Œ‡…– The data subject is the individual the personal data is in relation to. —’‡”˜‹•‘”› —–Š‘”‹–› The independent public authority who will be enforcing GDPR. In Ireland this will be the Data Protection Commissioner. T he General Data Protection Regulation (GDPR) has ƤƒŽŽ›…‘‡ ‹–‘ ‡ơ‡…–Ǥ –…ƒ „‡ †‹ƥ…—Ž– –‘ —†‡”•–ƒ† •‘‡ of the confusing terminology referenced in the legislation. In this article, we have put together a useful GDPR jargon buster to help you understand some of the key language used. ‡”•‘ƒŽ ƒ–ƒ Š‡ Šƒ• ƒ „”‘ƒ†‡” †‡Ƥ‹–‹‘ of what constitutes personal data. It is any information relating to an ‹†‡–‹Ƥ‡† ‘” ‹†‡–‹Ƥƒ„Ž‡ ƒ–—”ƒŽ person that can be used directly or indirectly to identify the person ‡Ǥ‰Ǥ ƒ‡ǡ ‹†‡–‹Ƥ…ƒ–‹‘ —„‡”ǡ Ž‘…ƒ–‹‘ †ƒ–ƒ ‘” ‘Ž‹‡ ‹†‡–‹Ƥ‡”Ǥ ƒ–ƒ ‘–”‘ŽŽ‡” A legal individual, public authority, agency or body that, alone or jointly with others, determines the purposes and methods of processing personal data. ƒ–ƒ ”‘…‡••‘” A legal individual, public authority, agency or body that, which processes personal data on behalf of the controller. ”‘…‡••‹‰ Any operation performed on personal data, whether or not by automated means, including collection, use, recording etc. ‘•‡– Informed, unambiguous, freely ‰‹˜‡ǡ •’‡…‹Ƥ…ƒ† ‡š’Ž‹…‹–…‘•‡– by statement or action from the data subject to have data relating to him/her processed. The GDPR Jargon Buster ർ Lorraine Valentine of CIF cuts through some of the jargon associated with the EU General Data Protection Regulation (GDPR), which came into force on Friday, May 25th. Lorraine Valentine