Storing personal data securely
You are likely to store some form of Any information about an identifiable, living person. Information which cannot be used to identify someone on its own will still be personal data if it can be used in combination with other information to identify that individual. during your business activities, either electronically or in hard copy. This is regulated by The area of law which deals with the way in which data can be handled. law and Violations of a legal or moral obligation. of your legal obligations can result in significant fines. This section will guide you through your obligations, including carrying out an impact assessment, how long you can store data for and how to delete or anonymise it. It will also help you to consider what Also known as a debenture, charge or mortgage, security over an asset or assets (such as cash, debts, real estate or equipment) is given by a borrower (and sometimes a third party such as a shareholder of the borrower) to a lender in case the borrower fails to make a payment due. Security is also used to refer to a personal guarantee of a borrower's payment obligations to a lender, typically given again by a shareholder and sometimes secured over the shareholder's personal assets. In the event of a borrower's failure to make a payment due to a lender, the lender will have the right to sell any asset secured or call in the guarantee. measures you need and what to do if these fail.
The rules about storing data
- 1.Can I store personal data?
- 2.Does the personal data I store have to be easy to access?
- 3.Do I need to carry out a data protection impact assessment before storing personal data?
- 4.Do I need to review my data protection impact assessment once it is done?
- 5.Do I need to carry out a data protection impact assessment when using a third party to store personal data?
- 6.What if my data protection impact assessment indicates that storage poses a significant risk?
- 7.How do I make sure that I am only storing necessary personal data?
- 8.Can I store irrelevant data?
- 9.Do I need to review the data that I have stored?
- 10.How can I store the data in a way that ensures that individuals cannot be identified?
- 11.What do I need to do to make sure that the personal data I keep remains accurate?
Data retention
- 12.How long can I store personal data for?
- 13.Do I have to review my retention periods?
- 14.Do I have to tell individuals how long I am storing their personal data for?
- 15.Can an individual request that I stop storing their data?
- 16.How do I dispose of personal data securely?
- 17.Do I have to tell anyone else that I am disposing of an individuals' personal data?
Secure data storage
- 18.What security measures do I need if I am storing personal data in hard copy?
- 19.What security measures do I need when I am storing personal data electronically?
- 20.How can I make sure that my equipment for storing personal data electronically is physically secure?
- 21.How can I restrict access to personal data that I am storing electronically?
- 22.How do I use encryption to store personal data securely?
- 23.What cybersecurity measures can I take to store personal data securely?
- 24.What security measures do I need if I am outsourcing the storage of personal data (eg to the cloud)?
- 25.What are the additional security risks associated with outsourcing data storage?
- 26.What should I do if my security measures are compromised?