A digital existence, often related to the digital footprint people leave as they navigate our heavily inter-connected existence, is like a trail left by a modern day net-running Hansel and Gretel in the cyber forests. When we click "accept" or "submit" or other interactive elements; scroll through a feed filled with adverts and hyperlinks with their insistent calls to like and dislike; buy a quirky object online; save a link to a note-app or repost to our own feeds; we drop a digital breadcrumb to say where we have been and what we did there.
I asked them if they knew the devices that were used to access the data? When they accessed the data? What security was on each device? I also asked if they used simple security such as two factor auth everywhere? Crucially I asked if they logged who had access? When they had access? What they had access to?
In regards to business activities you have another vector for potential data legislation headaches. That can be a security threat, data processing that is out-of-scope (or in breach of rights or consent) or even uncertainty about where your data goes and what actions are performed on it. This can lead to all sorts of problems.
If you are using almost any modern office tools you are likely using some form of […]
How Do I Supply Data? Information requests are usually provided in an electronic file. As detailed […]
How should an organisation respond to a request? You should comply with a request for information […]
What is Subject Access? It is the right for an individual to obtain any personal information […]
What is a SAR? The Subject Access Request (SAR) is the right of access afforded under […]
