What are the 7 principles of GDPR?
HTML-код
- Опубликовано: 19 июн 2024
- Want GDPR compliance for your organisation? Keepabl's Privacy Management Software gets you there fast. Try for free: privacykitchen.tv/getdemo
What are GDPR’s 7 Principles? And how do they drive your compliance?
It’s something that anyone processing personal data needs to know, as a breach of GDPR's Principles opens you up to the highest possible fine under GDPR - a whopping 4% of global turnover, or €20million/£17.5million depending on your GDPR.
Our latest Privacy Kitchen goes back to first principles (excuse the pun!), giving a concise overview in just one minute per Principle.
Make sure you stick around for the bonus tip for a bit of expert advice on creating your Privacy Framework.
Want more top tips on how to operationalise Privacy at your organisation? Sign up to the Keepabl monthly newsletter: privacykitchen.tv/newsletter
Links:
GDPR
eur-lex.europa.eu/eli/reg/201...
UK ICO on GDPR’s Principles
ico.org.uk/for-organisations/...
Convention 108
www.coe.int/en/web/convention...
Looking to achieve GDPR compliance within your organisation? Arrange a demo and free 14-day trial of Keepabl's award-winning Privacy Management Software:
privacykitchen.tv/getdemo
Fantastic video. Using this as part of my CIPP / US studies. Thanks!
You deserve one million likes.
Thanks so much! Super happy you're enjoying the videos :D
I am currently undertaking an NVQ Level 3 in Business Administration which requires me to talk confidently about data protection legislation in my final assessment, and throughout my coursework. This video provides a great explanation of each principle, but is still very much to the point! Really helpful for some additional revision. Many thanks.
Many thanks fr your comment! So happy it's helping you and all the best with your assessment.
Nice content, delivered smartly.
Accountability is not a Principle... there are 6 Privacy Principles... not 7... yet that is a detail :) Very well presented !!!
Thank you! Really glad you liked it 😊 We'd just note most say 7 principles, as here with the ICO ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/principles/
01:12 1. Lawfulness, fairness & transparency
02:18 2. Purpose of limitation
03:05 3. Data minimisation
03:41 4. Accuracy
04:20 5. Storage limitations
05:15 6. Security
05:52 7. Accountability
LASPADS
bY WAHAT AUTHORITY AND WITH WHAT ENFORCEMENT COULD ANY OF THIS POSSIBLY BE ENFORCED. iT IS JUST ANOTHER OF THE WEF HAIRBRAIN SCHEMES TO CONTROL ALL OF US. THEY BELIEVE THEY CAN SHEAK THIS IN ON THE PUBLIC THOUGH TOSMOSIS, AND NO ONE WILL QUESTION WHO IT IS WHO IS MAKING UP RULES WE MUST FOLLOW. THE WEF IS NORT ANY ELECTED GOVERNMENT. SO THERE IS NO NEED TO LISTEN TO THEIR VAPOR RULES OR TO PAY KLAUS SCHWAB FINES TO ENRICH THIS OLD FOOL. I CANT BELIEVE YOU ARE PROMOTING THISB. S.
Thank you 🙏
Very nicely explained
Many thanks Ananya, glad you enjoyed it!
I am seriously concidering taking someone to court over this.
Integrity and confidentiality refers to old principles related to the handling of classified or sensitive information at any level (also known as the CIA triad, but not named after the CIA we all immediately think of). It seems like they have basically shoehorned those words in there because they simply already existed in a field relevant to GDPR in some respects. I am not sure if it is an Americanism that has been adopted by the UK over time, or what...
Great video!
Many thanks!
I believe they use Confidentiality and Integrity rather than the broader "Security" because Security also covers Availability (the security Triad of CIA).
Hello Robert, it was a nice explanation of GDRP principles. Regulatory authorities in EU and other countries are tightening the supervision to ensure Data Protection of Data Subjects by the Data Controllers and Data Processors. Element of Free Data Consent f Data Subjects is of crucial importance.
Hi,
I have a project this topic GDPR and DPA 2018 EU and UK opt-in into cookies
can you link to me any website for my final project please? Thanks
For cookies in the UK, we particularly recommend looking at articles and guides on law firm websites and looking at the particular rules in PECR and the draft DPDI2. Good luck with your project!
@@PrivacyKitchen Thankyou…, do you mind linking me please?
Very understandable overview for newbies like myself... now, what does gdpr stand for?
General Data Protection Regulation
Is it breaching GPDR if a clients name is in an email title..on counselling?
Very Nice
I was refused a copy of pc' body worn cam, have they breached GDPR?
Cool channel
Hey i wanted to ask, can any thing come up from using a declaration vs a checkbox in any scenario
I agree to Terms and Conditions [checkbox]
I agree to Privacy Policy [checkbox]
vs on registration showing a declaration
By proceeding i agree to [Service]'s Terms and Conditions and Privacy Policy (popular in tech giants, and other apps i've tested, its nicer UX)
I am in a debate with this at work at the moment and am told i am wrong, what about class 2 medical devices?
That's a few questions in there! We don't provide advice and can't advise on particular situations. We always recommend clarifying what the processing activity is, or the multiple activities, deciding on the appropriate legal basis, then deciding on the appropriate notices / flow / records etc.
GDPR also counts for goverment organisations I asume not onlys for commercial organisations?
Hi, that's right, GDPR doesn't apply to law enforcement (there's a parallel directive on that) or national security. But in the UK the UK Data Protection Act effectively extends it in an amended form there. But yes, it applies eg to public sector schools, hospitals, councils etc. They also have other regimes such as Freedom of Information to contend with!
Can you kindly explain to me how data protection impact your role as a security operative
Wow, such a big question! We'll tee up some videos on this for you in 2023 :) Privacy and Security are fraternal twins and Security is only 1 of 7 Principles in GDPR. Recognising that alone will put you ahead of the game. Thanks for your comment.
What would be the legal grounds for unfair dismissal for a private group conversation on Facebook leading to removal from a charity group? i.e if someone was raising awareness of manipulation or asking a question that would lead to a screen shot which in turn would be shown to the leaders.
Thanks for any input, been round the merry go round with google search and Facebook privacy laws.
THEY USE VAPOR LEGALESE LIKE TO THIS TO SCARE PEOPLE AND BELIEVE THEY CAN FINE YOU AND COLLECT. TELL THEM GOFYOURSELF
I've been watching a lot of 'auditing' videos lately and I'm fully acquainted with an auditor's right to film... but when it comes to publishing, especially when someone belonging to whatever company is being audited specifically says they do not want this being shown on RUclips, I get lost in the tangled and layered swamp that covers privacy. Is auditing for 'personal use'? Do auditors have to comply with GDPR? Can they publish someone's image if they have been asked not to? Do Google rules apply in UK? I'm totally lost with all of the legislation.
Hi, you'll understand we can't give long advice or even give advice at all - we're not a law firm and you should seek professional advice. Hope the videos help clarify matters!
Thank you for great video! my neighbour filed and still files false allegations against me to the police. Is there any way to erase these reports from my criminal record? I was interviews by the police and managed to rebut some of the accusations, I have made SAR to the police and received catalogue of different offences reported by my neighbour... this accusations are baseless but still with be recorded on my enhanced DBS check... I dont understand how they can punish me, burden my criminal record, for things I have never than... HELP
So sorry to hear you're having such issues but you'll appreciate we can't give advice on individual cases. And we don't give legal advice at all. This is a tricky area. The facts are all important so we recommend you seek legal advice.
Thank you for reply.
General Question: Would it be possible (in general) for anyone to stop the police from disclosing allegations on one's enhanced DBS check? Can police make a decision for refusal to erase data on the 'Public interest' ground without explaining the process of how they balanced public interest vs one's rights to reach this decision and how it overrides one's rights? I am just wondering how it could be challenged in general. Can it?
How can you prove who gave your details to someone else ? Like my old employer, is someone is trying to get in touch with me and call them ? How long can your old employer keep your details IE phone number, Email?
Hi, you'll understand we can't give long advice or even give advice at all - we're not a law firm and you should seek professional advice. What we can say is there should be retention periods for information depending on the purpose, and no personal data should be kept for ever.
Google banned my account in my sleep because of my baby photos...Can the GDPR get my data back?
You'll appreciate we can't give specific advice. If GDPR applies you may have data subject rights including the right to copies of your personal data - but that's only to the personal data, nothing else, so it may not deliver what you're after.
I am Nigerian
Your mouth is too fast
So sorry! There are captions as well, which we hope are helpful. Thank you for your comment - and for watching!
I know,but it would have been easier if I could hear u and at the same time read it. You can always create am option whereby listeners can switch from one audio pace to another (1x to 1.5x to 2.0)
I'm not sure if you understand my message. Do you?
Good work. My name is Olaniyi
@@agboolayinka378 You can slow down the speech in settings