1 - Let’s get personal
What exactly is personal data? At first glance it’s an
easy answer, the usual - name, address, date of birth. Right?
No.
Personal data is any data item which could potentially lead to
the identification of a specific individual. That includes items
like click behavior, IP addresses, insurance subscription type,
voicemails you have left, books you have purchased, the list is
endless.
2 - It’s all policy
While the regulation text and jurisdiction implementation may
have been sufficiently explicit, each organisation is individual
and operates within its own micro environment. The policy adopted
by your organisation may be more stringent to reflect your industry
and risk appetite and therefore it should never be assumed that the
regulation is the final word. Focus on ensuring that employees know
what the policy is and it may also be more palatable than extracts
from a regulation.
