DIR Return Create A Forum - Home
       ---------------------------------------------------------
       IEHG Data Protection Discussion Board
  HTML https://iehgdp.createaforum.com
       ---------------------------------------------------------
       *****************************************************
   DIR Return to: General Discussion
       *****************************************************
       #Post#: 2--------------------------------------------------
       Test Topic
   DIR By: nohare
       Date: May 31, 2018, 9:31 am
       ---------------------------------------------------------
       Will GDPR make life easier or more difficult?
       #Post#: 3--------------------------------------------------
       Re: Test Topic
   DIR By: neilohare
       Date: May 31, 2018, 9:34 am
       ---------------------------------------------------------
       More difficult
       #Post#: 5--------------------------------------------------
       GDPR Compliance
   DIR By: elainemcguinness
       Date: June 1, 2018, 4:01 am
       ---------------------------------------------------------
       Hi all,
       Have any of you heard of the need to protect all unstructured
       data (data sitting outside your main systems)? We obtained
       external advice from GDPR experts on this but it seems an
       onerous task. Just wondering if you all are implementing this.
       To note this data would already be protected by the password on
       the PC.
       #Post#: 6--------------------------------------------------
       Re: Test Topic
   DIR By: morana
       Date: June 2, 2018, 5:00 am
       ---------------------------------------------------------
       Elaine, What are they recommending outside of the existing
       security measures? Do you have a document that we can review and
       comment on?
       #Post#: 7--------------------------------------------------
       Re: Test Topic
   DIR By: elainemcguinness
       Date: June 5, 2018, 3:52 am
       ---------------------------------------------------------
       Hi all,
       This was recommended as part of a full GDPR review.
       Here is the slide relating to the unstructured data:
       Managing Unstructured Data
       Unstructured Personal data is any data stored or processed
       outside of a structured system or application (e.g. CAPAS)
       Managing unstructured data is a considerable concern
       Policy and procedures for exports from systems (Excel Files)
       Notify staff to delete any personal no longer required
       Search network for large excel files these may contain
       significant personal data
       Maintain documentary evidence in form of emails or audits
       conducted
       Examples of unstructured personal data may include CV’s emailed
       and stored on personal network shares, exports of patient
       records stored on network shares etc
       Difficult to find ALL personal data records that exist across
       all network locations and email systems.
       Must show accountability by disabling/managing personal data
       exports from structured systems such as CAPAS
       Make efforts to identify and delete all personal data that
       exists outside of structured systems
       Where this is not possible apply access controls and auditing to
       the locations containing unstructured personal data
       BTW CAPAS is our patient administrative system.
       *****************************************************
       Page 1 of 1