We are not talking about new and cutting the edge information... As you can see, in 2005, the 27th International Conference of Data Protection has collected the fundamental principles of personal data protection:
- Principle of lawful and fair data collection and processing
- Principle of purpose-specification and -limitation
- Principle of proportionality
- Principle of transparency
- Principle of individual participation and the right of access
- Principle of non-discrimination
- Principle of data-security
- Principle of accuracy
- Principle of responsability
- Principle of independent supervision
- Principle of adequate level of protection
These principles have been signed by all the Regulatory Agencies of European Union Countries. What does it mean? In Europe there is no law similar to SOX, but several different regulations (spreaded, and this is the problem) focus in similar aspects concerning to Information Security and Information Responsability.
Nowdays, therefore, Information Security (and all included topics like Information Security Governance, Risk Analisys, Continuty Plans...) is a must for even public and private corporations.
Tuesday, October 16, 2007
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment