Hi everybody,
Today I will tell you about the latest news on GDPR, a topic on which it’s important to always stay updated.
With my favorite painting in the background, I take this opportunity to wish you a good week!
All companies have adopted since 2019 the tools and procedures for processing personal data as set by GDPR, or at least should have done so.
What is important in any company, in order to continue correctly processing the personal data acquired, is that periodically updated training takes place.
In fact the Italian Data Privacy Authority, during 2020, took position on many important application aspects.
Since at present we are still committed to defend ourselves against Covid19 and social distancing is a must, the Italian Data Privacy Authority established that companies may use tracking tools or apps, but not those that collect data attributable to the individual employee, otherwise they would become a control tool prohibited by law.
Another important issue is outsourcing.
If a company outsources certain activities, it is mandatory that a written agreement for the appointment of a Data Processor has been signed. In this way, also this third party will be obliged to comply with all the rules of GDPR.
This statement is matching to the position of the EDPB, the European Data Protection Committee, which has established guidelines at European level.
External consultants, auditing firms, hosting services, are usually all those who fall into this category.
My recommendation to all companies, therefore, is to regularly provide training programs for their team, in order to always be in full compliance with the GDPR.