510 likes | 519 Vues
Good practices of the Bulgarian Data Protection Authority Prof. Veselin Tselkov , DSc – member of the Board Ms Desislava Borisova - chief legal adviser. Agenda. Introduction Good practices Conclusions. Introduction.
E N D
Good practices of the Bulgarian Data Protection AuthorityProf. VeselinTselkov, DSc – member of the BoardMs DesislavaBorisova - chief legal adviser
Agenda • Introduction • Good practices • Conclusions
Introduction „The sovereignty of the society, the region, the nation, the state has their only sense if their real sovereignty is based on the only real sovereignty - the sovereignty of the human being.” Vaclav Havel
The experience of the CPDP • Complaints • Inspections • Data controllers • Consultations
Strategic principles and priorities during the years • The raising of the awareness of the society • Training of the data controllers • Improving of the system for ensuring data protection • Strengthening of the administrative capacity of the Commission for personal data protection
Good practices • The raising of the awareness of the society • The training for the data controllers • The methodology for inspections activity • Ordinance № 1 dated 30 January 2013 on the minimum level of technical and organizational measures and the admissible type of personal data protection • The new information technologies in the work of the CPDP
The raising of the awareness of the society Continuous process of the raising of the awareness
Main problems • Lack of knowledge for the personal data protection problems • Lack of assessment of the importance of the problem and the threats • Lack of knowledge of the legislative framework • Lack of knowledge of the consequences of the violation of the rights
Targets for exerting an influence • Society • State authorities and local authorities • Private companies
The media • Use of media • Electronic media • Other media
The media Not only is important for the media to be considered as a corrective, but they also must be seen as a tool for influencing the society and as a key tool of influencing the society and contributing to the right functioning of the data protection system.
The media • Internet • Website of the CPDP • Social networks • Materials and banners in the most popular websites • Links between the website of the CPDP and other institutions: • State authorities • Industrial sector • Non-governmental organizations
The media • Internet • Website of the CPDP • Social networks • Materials and banners in the most popular websites • Links between the website of the CPDP and other institutions: • State authorities • Industrial sector • Non-governmental organizations
The media • Information bulletin • Contemporary trends • Legislative amendments • CPDP’s practices
The media The informational brochures can be generally oriented or oriented to stakeholders
The media • Informational brochures • 10 years of the CPDP • Your identity card • Video surveillance • Internet and children • Advices for parents • Your Schengen Information System’s rights
The media • Special postmark issued on the European Day for personal data protection – 28th January
Special postmark issued on the European Day for personal data protection – 28th January
The other initiatives • Examples • National children competition on pictures for Internet as a point of view • Joint and/or external meetings • Doors open days • Public lectures with the academic society
National children competition on pictures for Internet’s point of view – Katya 4
National children competition on pictures for Internet’s point of view – Mikaela 10
National children competition on pictures for Internet’s point of view – Elica 14
The other initiatives • Joint and/or external meetings • Formal meetings, plenary, workshops • With district governors, mayors, etc. • Thematic meetings with different authorities – Communications Regulation Commission, Commission for consumer protection • Open meetings
The other initiatives • Joint and/or external meetings • Press conferences with journalists • Doors open days for citizens and data controllers • Training • Law enforcements issues on the application of the Law for electronic communications ( discussions with stakeholders in different places – prosecutors, judges, etc.)
The other initiatives • Promotional information campaign with specific logo: „2012 - 10 years Commission for personal data protection – 28th January European data protection day” - leaflets, notebooks, badges, placards, cups pens, calendars, as well as flash memories with information about the data protection • Magnetic cartridge • Contents
Training. Scope of the training • State authorities and local authorities • Business organizations • Targeted groups • Stakeholders • Personnel (staff)
Training. Common subjects • Topical issues of the data protection issues • Legal framework of the personal data protection in the Republic of Bulgaria • Legal proceedings and supervision • Data controllers
Training. Specialized training • Education • Banking • Service sector • Hotels • Health sector • Schengen Information System
ORDINANCE № 1 dated 30 January 2013 On the minimum level of technical and organizational measures and the admissible type of personal data protection
ORDINANCE № 1 dated 30 January 2013 • General provisions • Confidentiality , integrity and availability • Implementing the need-to-know principle • Types of protection • Impact assessments • Levels of impact • Obligations of the controller
Methodology for Inspection Activity • Methodology of how to carry out an inspection • On-going inspections based on a monthly plan of the CPDP • Purpose • Scope • Cases http://www.cpdp.bg/?p=news_view&aid=478
Implementing New Information Technologies in the Work of CPDP • Call centre • Internet website • Information bulletin • Maintaining the Register of personal data controllers and the personal data registers kept by them • Automated document management system • Automated paperless system for open meetings
Concusion “We want to open new growth opportunities that Europe needs, and at the same time, we want to make data protection an effective right for everybody. We will deliver effective, practicable and future proof data protection rules that enable growth.” Viviane Reding
Agenda • Introduction • Good practices • Conclusions
Good practices of the Bulgarian Data Protection AuthorityProf. VeselinTselkov, DSc – member of the BoardMs DesislavaBorisova - chief legal adviser
Questions ?prof. VeselinTselkov, DSc – member of the BoardDesislavaBorisova - chief legal adviser