Welcome to My Blog

Chintan Pathak is a popular cyberlawyer and operates from Surat in India. He is specializing in cyberlaws and Intellectual property laws.
Chintan Pathak is a popular cyberlawyer and operates from Surat in India. He is specializing in cyberlaws and Intellectual property laws.

Smiley face
Showing posts with label Data Protection. Show all posts
Showing posts with label Data Protection. Show all posts

Friday, 30 May 2014

Data Security

No comments:
Data means information which is being processed by means of equipment operating automatically in response to instructions given for that purpose, recorded with the intention that it should be processed by means of such equipment, recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system, forms part of an accessible record, or recorded information held by a public authority. 

Data Security means protecting a database from destructive forces and the unwanted actions of unauthorized users. It can also be defined as protective measures for digital privacy which are applied to prevent unauthorized access to computers, databases, websites and other confidential documents. It also protects data from corruption. In today’s world, security of data is the first priority for all organizations irrespective of size and genre. It is also known as information security (IS) or computer security. 

The focus behind data security is to ensure privacy while protecting personal or corporate data. Data can be considered as the information stored in form of rows and columns in database, network servers and personal computers. Data can include any damn thing from personal file to property papers, business secrets or market analysis. It could be anything of interest. Some of these are not intended to leave the system as it could lead to numerous problems for the organization. Having your bank account details stolen or system administrator with a lost database of client’s information are in the same condition. So, the database manager should determine different access privileges for different users. All users will be able to access only some part of the data and not the confidential one. Some users can only read the database while some who are qualified can also edit the database. The purpose of determining who has access, as well as the degree of access, is to protect the data from unauthorized use
. 
Security of data includes physical and technological security along with management and organizational security measures. For physical security, Data must be protected physically from harm or accident.  For technical security, one can use different hardware and software mechanisms or password protection schemes for security of data on a personal computer or organizations. Organizational security measures like limiting access, etc are also equally important in addition to physical and technological security.

There is huge emphasis on data security in the age of internet. If you don’t follow essential guidelines for security of data, sensitive data is at risk.
Continue Reading...

Data Protection

No comments:
Data protection is the relationship between collection and dissemination of data, technology, the public expectation of privacy, and the legal and political issues surrounding them. The challenge in data privacy is to share data while protecting personally identifiable information. 

Laws for protection of data exist to balance between the rights of individuals to privacy and the ability of organizations to use data for the purposes of business. The Data Protection Act (DPA) protects the privacy and integrity of data held on individuals by businesses and other organizations. The act ensures that individuals have access to their data and can correct it, if necessary. 

Here are few tips for Protection of data in organizations according to the Data Protection Act:

Data processing means obtaining, recording or holding the data or carrying out any operation on the data like - Organization, adaptation or alteration of the data, Retrieval, consultation or use of the data, Disclosure of the information or data by transmission, dissemination or otherwise making available, or Alignment, combination, blocking, erasure or destruction of the data.

•    Personal data of employees shall be processed fairly and lawfully.
•    Personal data should be obtained only for specified and lawful purpose, and shall not be further processed in any manner incompatible with that purpose.
•    Personal data should be adequate, relevant and not in excess in relation to the purpose for which they are processed.
•    Personal data should be accurate and, where necessary, kept up to date.
•    Personal data processed for any purpose should not be kept longer than is necessary after that purpose is fulfilled.
•    Personal data should be processed in accordance with the rights of data subjects under Data Protection Act.
•    Appropriate technical and organizational measures should be taken against unauthorized or unlawful processing of personal data and against physical loss of data like accidental loss, destruction, or damage to personal data.
•    Personal data should not be transferred overseas unless that country ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

The increasing use of information technology and the internet ensures that data protection remains one of the most important and relevant laws that online businesses are required to comply with. The internet is all about the transfer of information. Internet is also used for collection of information. Organizations must care about collection, storage and usage of personal data. This involves amending employment and marketing practices in addition to internal training.
Continue Reading...