Joakim Hvalby
Program Manager Information Security
Article   December 14 2022

GDPR tip 4: Have GDPR procedures in place, even for information on paper

Although most of the GDPR revolves around our digital handling of data, privacy protection also applies to physical documents. Therefore, it is important to have good routines there as well. Joakim Hvalby, Program Manager Information Security at Junglemap writes in one of four articles with tips regarding GDPR.

Privacy
NanoLearning
GDPR tip 4: Have GDPR procedures in place, even for information on paper

Image: Piqsels.com License Free

Although digitalization has moved quickly, we have not yet introduced the completely  paperless office. And while digital threats are high on an organization's agenda, it's a mistake to assume that paper-based security risks no longer exist. According to Data security incident trends, as many as seven percent of security incidents have to do with "loss/theft of paperwork or data left in unsecure locations". 

One of the concerns related to GDPR and the Data Protection Act is that all personal data must be processed in accordance with the law, which means that we must be able to track and document it – to know what, where, when and how they are used. The Data Protection Act is technology neutral, which means that it also applies to personal data that only exists physically on paper. 

Since all organizations today place high demands on searchability also in written physical information that is handled, it’s wise to consider GDPR and privacy protection already when the system for handling physical information is set up.  

It's basically about three things 

  • Raising awareness about handling of personal data.  
  • Easy management of data.  
  • Compliance. All year round. 

We have now launched the 2024 version of Privacy and GDPR for all employees. A brand new course with updated content over fewer lessons, but with more interactive touch points giving your organisation's DPO a better understanding of the level of your organisations' awareness.

To increase engagement and awareness, this new course also focuses on why GDPR and privacy is important both at work – and in your private life. 

Joakim Hvalby Program Manager Information Security
Article   December 14 2022