Informacja

Drogi użytkowniku, aplikacja do prawidłowego działania wymaga obsługi JavaScript. Proszę włącz obsługę JavaScript w Twojej przeglądarce.

Wyszukujesz frazę "gdpr" wg kryterium: Temat


Tytuł:
The Analysis of Risks to Personal Data Security
Autorzy:
Kosznik-Biernacka, Sylwia
Powiązania:
https://bibliotekanauki.pl/articles/1807730.pdf
Data publikacji:
2020-11-30
Wydawca:
Wyższa Szkoła Bezpieczeństwa Publicznego i Indywidualnego Apeiron w Krakowie
Tematy:
risk
personal data
GDPR
Opis:
Article 32 of the EU General Data Protection Regulation imposes the obligation to implement appropriate safeguards to protect personal data. It states that the application of adequate measures is to be preceded by a risk analysis and evaluation. In the current paper, as the main risk factors, probability and consequences were assumed that take into account the basic attributes of information, i.e. confidentiality, integrity and availability. Next, a risk analysis methodology based on the risk matrix is proposed. The issue discussed in the publication is currently valid and still requires careful analysis in order to develop universal standards aimed at establishing certification mechanisms as well as quality labels and markings in terms of personal data protection.
Źródło:
Security Dimensions; 2020, 34(34); 256-267
2353-7000
Pojawia się w:
Security Dimensions
Dostawca treści:
Biblioteka Nauki
Artykuł
Tytuł:
Towards an Auditable Cryptographic Access Control to High-value Sensitive Data
Autorzy:
Kanciak, Krzysztof
Wrona, Konrad
Powiązania:
https://bibliotekanauki.pl/articles/227097.pdf
Data publikacji:
2020
Wydawca:
Polska Akademia Nauk. Czytelnia Czasopism PAN
Tematy:
identity-based encryption
GDPR
Opis:
We discuss the challenge of achieving an auditable key management for cryptographic access control to high-value sensitive data. In such settings it is important to be able to audit the key management process - and in particular to be able to provide verifiable proofs of key generation. The auditable key management has several possible use cases in both civilian and military world. In particular, the new regulations for protection of sensitive personal data, such as GDPR, introduce strict requirements for handling of personal data and apply a very restrictive definition of what can be considered a personal data. Cryptographic access control for personal data has a potential to become extremely important for preserving industrial ability to innovate, while protecting subject’s privacy, especially in the context of widely deployed modern monitoring, tracking and profiling capabilities, that are used by both governmental institutions and high-tech companies. However, in general, an encrypted data is still considered as personal under GDPR and therefore cannot be, e.g., stored or processed in a public cloud or distributed ledger. In our work we propose an identity-based cryptographic framework that ensures confidentiality, availability, integrity of data while potentially remaining compliant with the GDPR framework.
Źródło:
International Journal of Electronics and Telecommunications; 2020, 66, 3; 449-458
2300-1933
Pojawia się w:
International Journal of Electronics and Telecommunications
Dostawca treści:
Biblioteka Nauki
Artykuł
Tytuł:
The Powers of the Supervisory Body in the GDPR as a Basis for Shaping the Practices of Personal Data Processing
Autorzy:
Hajduk, Paweł
Powiązania:
https://bibliotekanauki.pl/articles/1195198.pdf
Data publikacji:
2021-06-16
Wydawca:
Katolicki Uniwersytet Lubelski Jana Pawła II
Tematy:
GDPR
supervisory
authorities
data
processing
Opis:
The purpose of this article is to analyse the competences of the supervisory authority provided for in the General Data Protection Regulation (GDPR) as a tool to shape the practice of personal data processing. This article verifies the thesis that the status of the supervisory authority formed in the GDPR, taking into account the authority’s independence, makes it possible to exercise the authority thoroughly, which is the basis for shaping personal data processing practice. Supervisory authorities have a wide range of powers to carry out the duties assigned to them. This is guaranteed by their independence. The exercise of powers resonates with all entities that fall under the jurisdiction of those authorities. The decisions of the authorities become the subject of interest of both the literature and personal data administrators. The powers connected with imposing administrative penalties might play a particular role. Their imposition causes that entities which are in similar circumstances may expect to be subject to the same penalties. In order to avoid this situation, they tend to adapt their practices to the model adopted in the decision. Opinions and recommendations, as well as codes of conduct approved by the supervisory authorities for particular sectors, which are a benchmark for administrators in those sectors, play an important preventive role.
Źródło:
Review of European and Comparative Law; 2021, 45, 2; 57-75
2545-384X
Pojawia się w:
Review of European and Comparative Law
Dostawca treści:
Biblioteka Nauki
Artykuł
Tytuł:
Anonimizacja niektórych danych w oświadczeniu majątkowym posła
Anonymisation of certain data in the Deputy‘s declaration of assets
Autorzy:
Dubowski, Rafał
Powiązania:
https://bibliotekanauki.pl/articles/27312750.pdf
Data publikacji:
2023
Wydawca:
Kancelaria Sejmu. Biuro Analiz Sejmowych
Tematy:
deputy
declaration of assets
GDPR
Opis:
The issue under analysis concerns the anonymisation of the data of a natural person to whom the Deputy has a financial obligation. After analysing the provisions of the GDPR, the author concludes that they do not preclude the disclosure of the name of the natural person with regard to whom the liability has arisen and do not provide a legal basis for effectively requesting the Marshal of the Sejm to anonymise the data of private individuals with regard to whom the liability has arisen in the declaration of assets.
Źródło:
Zeszyty Prawnicze BAS; 2023, 3(79); 202-209
1896-9852
2082-064X
Pojawia się w:
Zeszyty Prawnicze BAS
Dostawca treści:
Biblioteka Nauki
Artykuł
Tytuł:
GDPR implementation in public administrationin Poland - 1.5 year after: An empirical analysis
Autorzy:
Lisiak-Felicka, Dominika
Szmit, Maciej
Powiązania:
https://bibliotekanauki.pl/articles/2027245.pdf
Data publikacji:
2021
Wydawca:
Uniwersytet Ekonomiczny w Katowicach
Tematy:
Data protection breaches
GDPR implementation
General Data Protection Regulation (GDPR)
Personal data
Public administration
Opis:
Aim/purpose–The paper contains descriptive exploratory research on the implementation of General Data Protection Requirements (GDPR) in a group of Polish public administration offices. The purpose of this research is to investigate the current state of personal data protection in the entities surveyed.Design/methodology/approach–The diagnostic survey method using the Computer Assisted Web Interview was employed. The survey was conducted in local government administration offices a year and a half after the GDPRimplementation.Findings–All marshal offices and the majority of districts (about 80%) confirmed that they comply with all the GDPR requirements. The situation was slightly worse in municipal offices – about 23% of them declared that they do not complywith all the GDPR requirements. In officials’ opinion this situation may be improved by conducting training for employees, employee engagement, and appropriate support of the office manage-ment. Another aspect that draws attention is a very small budget dedicated to the GDPR implementation and maintenance in most of the offices surveyed.Research implications/limitations–The limitation of the findings is the relatively low responsiveness of the questionnaire survey.Originality/value/contribution–The research concerns a relatively new subject. The state of personal data protection in public administration in Poland after 18 months of the GDPR implementation was analyzed. So far, there is no comprehensive research that has been conducted into this field in local government administration.
Źródło:
Journal of Economics and Management; 2021, 43; 1-21
1732-1948
Pojawia się w:
Journal of Economics and Management
Dostawca treści:
Biblioteka Nauki
Artykuł
Tytuł:
Personal Data Protection as an Expression of Personalism
Autorzy:
Chojara-Sobiecka, Małgorzata
Kroczek, Piotr
Powiązania:
https://bibliotekanauki.pl/articles/2015995.pdf
Data publikacji:
2021-12-31
Wydawca:
Wydawnictwo Uniwersytetu Śląskiego
Tematy:
data protection
personalism
Karol Wojtyła
GDPR
Opis:
Human-related issues are the objected personalism. One of the current problems contemporarily recognized and widely known is data protection. The article aims to present a mutual connection between legal regulations of data protection, taking under consideration GDPR, and personalism. The conclusion is that there are many elements in legal regulations that justify the conviction that the protection of personal data can be seen as an expression of personalism.
Źródło:
Philosophy and Canon Law; 2021, 7, 2; 1-9
2450-4955
2451-2141
Pojawia się w:
Philosophy and Canon Law
Dostawca treści:
Biblioteka Nauki
Artykuł
Tytuł:
Przetwarzanie danych osobowych do celów badań naukowych. Aspekty prawne
The processing of personal data for the purposes of scientific research. Legal aspects
Autorzy:
Pyka, Aleksandra
Powiązania:
https://bibliotekanauki.pl/articles/911187.pdf
Data publikacji:
2019-12-15
Wydawca:
Uniwersytet im. Adama Mickiewicza w Poznaniu
Tematy:
scientific research
GDPR
personal data
processing
Opis:
This article refers to the issue of personal data processing conducted in connection with scientific research and in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). It is not uncommon for the purposes of scientific research to process personal data, which is connected with the obligation to respect the rights of the data of the subjects involved. Entities conducting scientific research that process personal data for this purpose are required to apply the general regulation governing, among others, the obligations imposed on the controllers. The issue of personal data processing for scientific research purposes has also been regulated in national legislation in connection with the need to apply the General Data Protection Regulation. The article discusses the basics of the admissibility of data processing for the needs of scientific research; providing personal data regarding criminal convictions and offences extracted from public registers at the request of the entity conducting scientific research; exercising the rights of the data of the subjects concerned; as well as the implementation of appropriate technical and organizational measures to ensure the security of data processing. In addition, the article discusses the issue of anonymization of personal data carried out after achieving the purpose of personal data processing, as well as the processing of special categories of personal data. The topics discussed in the article were not discussed in detail, as this would require further elaboration in a publication with a much wider volume range.
Źródło:
Studia Prawa Publicznego; 2019, 4, 28; 79-101
2300-3936
Pojawia się w:
Studia Prawa Publicznego
Dostawca treści:
Biblioteka Nauki
Artykuł
Tytuł:
Digitizing the public administration and safeguarding individual rights: automated decision-making at the intersection of the GDPR and Polish administrative procedure
Autorzy:
Geburczyk, Filip
Powiązania:
https://bibliotekanauki.pl/articles/1036832.pdf
Data publikacji:
2021-03-30
Wydawca:
Uniwersytet im. Adama Mickiewicza w Poznaniu
Tematy:
automated decision-making
digitization
GDPR
administrative procedure
Opis:
Automating administrative decision-making through the use of algorithms integrated into administrative procedures constitutes a major goal of both the Polish government and the EU. Notwithstanding the undeniable benefits of automated administrative decision-making, the tentative development of the law regulating administrative procedures in this regard translates into risks to important elements of administrative due process. Although a systematic regulatory approach to automated administrative decision-making is lacking, an analysis of the provisions of the GDPR concerning profiling algorithms and automated decision-making may prove rewarding, given that they may directly affect the procedural rights of parties in proceedings before national authorities. On the other hand, the imprecise language of the GDPR makes it susceptible to interpretations deeply embedded in the hitherto elaborated practices of the Polish administrative procedure. The article analyses the intersection between the GDPR and Polish administrative procedure in order to examine the potential for mutual influences between both frameworks.
Źródło:
Ruch Prawniczy, Ekonomiczny i Socjologiczny; 2021, 83, 1; 99-113
0035-9629
2543-9170
Pojawia się w:
Ruch Prawniczy, Ekonomiczny i Socjologiczny
Dostawca treści:
Biblioteka Nauki
Artykuł
Tytuł:
The Court of Justice Kicks Around the Dichotomy Between Data Protection and Competition Law Case Comment of the Preliminary Ruling in Case C-252/21 Meta Platforms v. Bundeskartellamt
Autorzy:
Martínez, Alba Ribera
Powiązania:
https://bibliotekanauki.pl/articles/43468273.pdf
Data publikacji:
2023
Wydawca:
Uniwersytet Warszawski. Wydawnictwo Naukowe Wydziału Zarządzania
Tematy:
Competition Law
Exploitative Abuse
Data Protection
GDPR
Opis:
Data protection and competition law have been at a crossroads in terms of their integration. Antitrust authorities as well as data protection supervisory authorities have grappled with the question of whether both fields of law should be combined into the same analysis. The German competition authority, the Bundeskartellamt, was the first to fuse them in its landmark case against Facebook’s data processing terms and conditions. The exploitative theory of harm put forward by the German NCA is the first of its kind to integrate data protection considerations into the antitrust analysis, namely by drawing a line between an infringement with the General Data Protection Regulation (GDPR) and anti-competitive harm. This case comment outlines its key developments at the national level, to then address the questions that have been answered by the Court of Justice of the European Union, CJEU, in Case C-252/21 concerning the interpretation of the GDPR in the context of competition law.
La protection des données et le droit de la concurrence sont à la croisée des chemins en ce qui concerne leur intégration. Les autorités antitrust et les autorités de contrôle de la protection des données ont été confrontées à la question de savoir si les deux domaines du droit devaient être repris dans la même analyse. L’autorité allemande de la concurrence a été la première à les fusionner dans le cadre de l’affaire qui a fait jurisprudence contre les conditions générales de traitement des données de Facebook. La théorie du préjudice d’exploitation avancée par le Bundeskartellamt est la première du genre à intégrer des considérations relatives à la protection des données dans l’analyse antitrust, notamment en établissant une distinction entre une infraction au règlement général sur la protection des données (RGPD) et un préjudice anticoncurrentiel. Ce commentaire d’affaire présente les principaux développements au niveau national pour ensuite aborder les questions qui ont été repondues par la Cour de justice de l’Union européenne dans l’affaire C-252/21 concernant l’interprétation du GDPR dans le contexte du droit de la concurrence.
Źródło:
Yearbook of Antitrust and Regulatory Studies; 2023, 16, 28; 131-152
1689-9024
2545-0115
Pojawia się w:
Yearbook of Antitrust and Regulatory Studies
Dostawca treści:
Biblioteka Nauki
Artykuł
Tytuł:
Health data processing in the context of telemedicine: an overview between Brazil and the European Union post pandemic COVID-19
Autorzy:
Costa, Vinicius Venancio
Powiązania:
https://bibliotekanauki.pl/articles/2025369.pdf
Data publikacji:
2021
Wydawca:
Krakowska Akademia im. Andrzeja Frycza Modrzewskiego
Tematy:
telemedicine
LGPD
GDPR
Brazilian medicine
health data
Opis:
The use of telemedicine had notably been developed in Brazil after the beginning of the public emergency period caused by the pandemic of COVID-19. With the new data protection law in force in Brazil, which is similar to the GDPR, health data are in the spotlight. The purpose of this article is to exam what measures Brazil has adopted to guarantee the data protection for health data in view of this scenario, taking the EU as a perspective for comparison reasons. For the Brazilian analysis, not only the formal legislation was considered, but also the guidance of the Federal Council of Medicine, which is the competent authority to supervise and issue orders on the development of medicine in Brazil, including the telemedicine. The comparison with the EU was chosen due to the similar data protection regulation, since the LGPD presents similar provisions and regulations to those established in the GDPR, and because the European Commission has issued a study on February 11, 2021, assessing the implementation of the GDPR and the domestic regulations for health data in each of the EU countries. This article has found out Brazilian regulation still presents flaws and points for clarification, which are fundamental to guarantee the necessary legal security in operations.
Źródło:
Studia Prawnicze: rozprawy i materiały; 2021, Vol. (29), 2; 55-64
1689-8052
2451-0807
Pojawia się w:
Studia Prawnicze: rozprawy i materiały
Dostawca treści:
Biblioteka Nauki
Artykuł

Ta witryna wykorzystuje pliki cookies do przechowywania informacji na Twoim komputerze. Pliki cookies stosujemy w celu świadczenia usług na najwyższym poziomie, w tym w sposób dostosowany do indywidualnych potrzeb. Korzystanie z witryny bez zmiany ustawień dotyczących cookies oznacza, że będą one zamieszczane w Twoim komputerze. W każdym momencie możesz dokonać zmiany ustawień dotyczących cookies