Literature · Cyber Security: A Peer-Reviewed Journal EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

GDPR and employee data protection: Cyber security data example

Deborah Watson, Ryan Millerick — Cyber Security: A Peer-Reviewed Journal

Cyber Security: A Peer-Reviewed Journal
DOI
Employees Human Resources Data Breaches Security Storage Limitation Personal Data
Jun 1, 2018 Source

How it connects

Related across sources

Enforcement VDAI (Lithuania) - 3R-1143 VDAI (Lithuania) Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) EDPB Guidance EDPB Annual Report 2023 EDPB Guidance Guidelines 01/2022 on data subject rights - Right of access EDPB Guidance EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) EDPB Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR EDPB

Full text

This paper explores the implications of the European Union (EU) General Data Protection Regulation (GDPR) on employee personal data, specific to data elements that might be collected by Information Security (IS) in the effort to protect and defend the environment from data breach and exfiltration. GDPR compliance became effective in May 2018, and many organisations are still working through the strategic complexities of GDPR’s impact on their organisation. Using an example of a phishing assessment data set, the paper traverses the potential challenges that an organisation is likely to face. GDPR further defines sensitive information, and using this phishing assessment data, the paper illustrates a project data flow that defines what data would exist, its sensitivity level, the data owner, the data source, the data use, data retention and destruction considerations, as well as reporting and storage.

Original document at the source doi.org

Similar Content