So there is no fixed and unique standard for any project, but the protection must be thought out ad hoc for each project, along 3 points: IT systems; business procedures (adequate and correct); structural and infrastructure design of the project. There are also 7 key principles of this new approach to Privacy (online and otherwise): A proactive, not reactive approach is needed (therefore in favour of prevention); Respect for privacy is a basic setting; Privacy protection is a purpose incorporated into the design; Safety without ifs or buts; Full data lifecycle protection; Visibility and transparency in data management; Respect for user privacy.
The Principle of Privacy By Default This basic australia database directory principle, instead, maintains that companies must process personal data only to the extent necessary for the intended purposes and for a time strictly necessary for these purposes. Once again, therefore, the design phase is fundamental and must consider this approach, keeping in mind the guarantee of non-excessiveness of the data collected. to register on a website, to book a visit or to sign up for a newsletter, etc.
You need to pay attention to what data is collected and why. There can be no arbitrariness, but the methods of data collection, the purposes of each data collected, which subjects are authorized to access the database that stores the data, what security risks there may be and what measures to protect this database will be adopted must be made explicit. Data Breach There is a lot of mention of what to do in case of a data breach.