{"id":53182,"date":"2019-11-25T00:00:00","date_gmt":"2019-11-24T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/personalnye-dannye-v-rf-kto-vse-my-kuda-my-idyom"},"modified":"2020-02-18T14:01:03","modified_gmt":"2020-02-18T11:01:03","slug":"personalnye-dannye-v-rf-kto-vse-my-kuda-my-idyom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/personalnye-dannye-v-rf-kto-vse-my-kuda-my-idyom","title":{"rendered":"Isikuandmed Venemaal: kes me k\u00f5ik oleme? Kuhu me l\u00e4heme?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Viimase paaride aasta jooksul oleme k\u00f5ik kuulnud fraasi \"isikandmed\". Suuremal v\u00f5i v\u00e4iksemal m\u00e4\u00e4ral oleme oma \u00e4riprotsessid kohandanud seadusandlikest n\u00f5uetest l\u00e4htudes.<\/p>\n

Roskomnadzori kontrolle, mis tuvastasid selle aasta jooksul \u00f5igusrikkumisi, suureneb j\u00e4rjekindlalt 100%-ni. Statistika, mis esitati Roskomnadzori Keskf\u00f6deratsiooni juhtkonna poolt 2019. aasta esimeses poolaastas, n\u00e4itab 131 rikkumist 17 kontrolli k\u00e4igus. <\/p>\n

Meie igap\u00e4evaelus on \"k\u00fclmad\" k\u00f5ned erinevatelt organisatsioonidelt, kellega pole v\u00f5ib-olla kunagi \u00e4ri olnud. Mobiiltelefonidelt suurte ettev\u00f5tete (pangad, kindlustusettev\u00f5tted jne) nimel. SMS-kampaaniad, millest ei ole v\u00f5imalik loobuda. Nende arv n\u00e4ib ainult suurenevat.<\/p>\n

Tasakaalu leidmine \u00e4ri huvide ja regulatiivsete n\u00f5uete t\u00e4itmise vahel on iga suurusega ettev\u00f5tte jaoks t\u00f5eline v\u00e4ljakutse. Seadus soovitab hinnata iseseisvalt rakendatud meetmete loetelu ja piisavust. Hea uudisena on riskide v\u00e4hendamine v\u00f5imalik v\u00e4ltides k\u00f5ige levinumaid \u00f5igusrikkumisi. Ilmselt ei n\u00f5ua see lisakulusid ega tehniliselt keeruliste meetmete rakendamist.<\/a><\/noindex><\/p>\n

Ja nii, nimekirja tipus \u2013 isikandmete t\u00f6\u00f6tlemise tingimuste rikkumine. N\u00e4ited: t\u00f6\u00f6tlemise eesm\u00e4rkide, isikute kategooriate ja kolmandate isikute, kellele andmeid juurdep\u00e4\u00e4s on antud, mittet\u00e4ielik loetelu.<\/p>\n

T\u00f5de, millega tuleb leppida: ei ole v\u00f5imalik luua \u00fchtset n\u00f5usolekut k\u00f5igi elu juhtude jaoks \u2013 ei t\u00f6\u00f6tajate, klientide ega programmide kasutajate jaoks. Kuigi see oleks v\u00e4ga soovitav. <\/p>\n

Iga kord, kui k\u00e4ivitada uus turunduskampaania v\u00f5i muuta m\u00fc\u00fcgistruktuuri, v\u00f5tke 5 minutit, et veenduda, et n\u00f5usolek sisaldab: <\/p>\n

1) ettev\u00f5tte nimi ja aadress \u2013 operaator,
\n2) t\u00f6\u00f6tlemise eesm\u00e4rgid,
\n3) andmete loetelu,
\n4) andmetega tegelemise ja t\u00f6\u00f6tlemise meetodite loetelu,
\n5) rahvusvaheline andmeedastus ja\/v\u00f5i edastamine kolmandatele isikutele (konkreetsete riikide ja kolmandate isikute nimedega),
\n6) n\u00f5usoleku kehtivusaeg ja
\n7) selle tagasiv\u00f5tmise viis. <\/p>\n

Harva suudab Interneti-lt leitud mall vastata k\u00f5igile n\u00f5uetele, seega v\u00f5ib kasutada, kuid ettevaatlikult ja t\u00e4iendustega.<\/p>\n

Auditiors have access to documents containing personal data? \u2014 Consent specifying the purpose (conducting the audit), the name, and address of the auditing company is required. Has the company delivering goods for the online store changed? \u2014 The consent obtained during customer registration on the website is no longer sufficient. The option referencing a list of partners will not guarantee 100% peace of mind, but it is better than nothing.<\/p>\n

The processing of end-user data of software deserves separate mention. When you want to know your user as well as possible and send them relevant offers. When data is collected and stored, although a license key is enough for product registration. We can use such data with the subject's consent, but we must not tie the ability to provide basic service\/sell the product to compulsory marketing messages. This is not only about personal data but also about advertising legislation. <\/p>\n

Other conditions are equally challenging. The list of purposes must not be excessive. The principle is one purpose \u2013 one consent. That is, getting consent for processing the applicant's resume data and including it in the personnel reserve with one signature will not be possible. As a compromise, examples where each purpose is highlighted in a separate paragraph in the same document, allowing the subject to write \"agree\" \/ \"disagree\" in each case seem viable.<\/p>\n

And finally, what are personal data? How to understand from the vague definition given in the law (\"any information relating to an identified or identifiable natural person\"), whether a specific case falls under its action? Roskomnadzor promised to approve the personal data matrix by the end of 2018. The deadline was postponed to the end of 2019. We are waiting. <\/p>\n

What else are we waiting for:<\/p>\n