The guarantor's inspection plan
The 101 legislative decree of the 4 in September of last year, which harmonized the Italian legislation in the EU Regulation 2016 / 679, had among other things asked the Guarantor for a comprehensive attitude towards national public and private companies for the first eight months of application of the legislative decree. This time has just expired and inspections will be intensified. As we had already written last March, the sectors on which the Guarantor will focus its attention after the May 20 are: credit institutions with particular reference to flows linked to the register of accounts, health, national statistical system (Sistan), Spid, telemarketing, loyalty cards, large public databases.
So now the time has passed; the company, whether public or private, must be ready for any inspections by the Guarantor or the Guardia di Finanza, must effectively manage the perimeter of the management of the personal data processed, must be equipped with effective and modern tools to resist any attacks hackers, following a serious and careful analysis of business processes on the risks that personal data processed can take.
Unfortunately, despite the deadline of the moratorium, it does not seem that the sensitivity towards the problems related to the processing of personal data in general has increased, above all as a cultural change of the management, be it public or private, on the approach to the theme, which is was analyzed in the interesting article by Fernando Rubino, what can you do? here download.