{"id":111,"date":"2017-09-04T08:36:58","date_gmt":"2017-09-04T08:36:58","guid":{"rendered":"http:\/\/www.apti.cz\/?p=111"},"modified":"2022-08-18T07:14:22","modified_gmt":"2022-08-18T07:14:22","slug":"blizi-se-ucinnost-obecneho-narizeni-pro-ochranu-osobnich-udaju-zkracene-gdpr-tj-general-data-protection-regulation-jste-na-tuto-evoluci-pripraveni","status":"publish","type":"post","link":"https:\/\/www.apti.cz\/index.php\/2017\/09\/04\/blizi-se-ucinnost-obecneho-narizeni-pro-ochranu-osobnich-udaju-zkracene-gdpr-tj-general-data-protection-regulation-jste-na-tuto-evoluci-pripraveni\/","title":{"rendered":"BL\u00cd\u017d\u00cd SE \u00da\u010cINNOST OBECN\u00c9HO NA\u0158\u00cdZEN\u00cd PRO OCHRANU OSOBN\u00cdCH \u00daDAJ\u016e (ZKR\u00c1CEN\u011a GDPR, TJ. GENERAL DATA PROTECTION REGULATION), JSTE NA TUTO EVOLUCI P\u0158IPRAVENI?"},"content":{"rendered":"
Mgr. Nikola Dohnalov\u00e1<\/strong><\/div>\n

Executive director
\nFlyEye s.r.o.<\/p>\n

GDPR, ve sv\u00e9m pln\u00e9m n\u00e1zvu na\u0159\u00edzen\u00ed Evropsk\u00e9ho parlamentu a Rady (EU) 2016\/679 o ochran\u011b fyzick\u00fdch osob v souvislosti se zpracov\u00e1n\u00edm osobn\u00edch \u00fadaj\u016f a o voln\u00e9m pohybu t\u011bchto \u00fadaj\u016f a o zru\u0161en\u00ed sm\u011brnice 95\/46\/ES, bude od 25. kv\u011btna 2018 p\u0159\u00edmo pou\u017eiteln\u00fdm pr\u00e1vn\u00edm p\u0159edpisem, kter\u00fd zejm\u00e9na po hmotn\u011bpr\u00e1vn\u00ed str\u00e1nce nahrad\u00ed z\u00e1kon \u010d. 101\/2000 Sb., o ochran\u011b osobn\u00edch \u00fadaj\u016f. GDPR je tedy novou a do ur\u010dit\u00e9 m\u00edry revolu\u010dn\u00ed legislativou EU, jej\u00edm\u017e c\u00edlem je zv\u00fd\u0161it ochranu osobn\u00edch \u00fadaj\u016f ob\u010dan\u016f v cel\u00e9 EU.<\/p>\n

<\/p>\n

Na jak\u00fd okruh subjekt\u016f se GDPR vztahuje?<\/strong><\/h4>\n
GDPR se vztahuje na v\u0161echny subjekty, kter\u00e9 pracuj\u00ed \u010di prov\u00e1d\u011bj\u00ed dal\u0161\u00ed operace s osobn\u00edmi \u00fadaji. Z pohledu povinnost\u00ed jsou tyto subjekty d\u011bleny na spr\u00e1vce (controllers) a zpracovatele (processors).<\/div>\n
<\/div>\n
<\/div>\n
Jejich definice se od st\u00e1vaj\u00edc\u00ed pr\u00e1vn\u00ed \u00fapravy, tj. z\u00e1kon \u010d. 101\/2000 Sb., o ochran\u011b osobn\u00edch \u00fadaj\u016f, v\u00fdrazn\u011b neli\u0161\u00ed. Spr\u00e1vce i nad\u00e1le ur\u010duje ot\u00e1zky \u201cPro\u010d?\u201d a \u201cJak?\u201d, t\u00fdkaj\u00edc\u00ed se zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f a osoba zpracovatele nad\u00e1le jedn\u00e1 jm\u00e9nem spr\u00e1vce.<\/div>\n
Jednodu\u0161e \u0159e\u010deno: Pokud jste za sou\u010dasn\u00e9 pr\u00e1vn\u00ed \u00fapravy v postaven\u00ed spr\u00e1vce nebo zpracovatele, 25. kv\u011bten 2018, tedy datum, od kter\u00e9ho je GDPR \u00fa\u010dinn\u00e9, na Va\u0161em<\/div>\n
postaven\u00ed nic nezm\u011bn\u00ed.<\/div>\n
<\/div>\n
<\/div>\n
Pozor! GDPR se t\u00fdk\u00e1 i OSV\u010c, pokud doch\u00e1z\u00ed ke zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f v r\u00e1mci obchodn\u00ed \u010dinnosti.<\/div>\n
<\/div>\n

Jak k implementaci GDPR p\u0159istupovat?<\/strong><\/h4>\n
<\/div>\n
Pov\u011bdom\u00ed<\/div>\n
Je d\u016fle\u017eit\u00e9 aby osoby pov\u011b\u0159en\u00e9 \u0159\u00edzen\u00edm \u0161pole\u010dnosti a vedouc\u00ed zam\u011bstnanci m\u011bli pov\u011bdom\u00ed o bl\u00ed\u017eic\u00ed se legislativn\u00ed zm\u011bn\u011b v oblasti ochrany osobn\u00edch \u00fadaj\u016f.<\/div>\n
<\/div>\n
Inventarizace<\/div>\n
Je t\u0159eba zmapovat datov\u00e9 toky, tj. jak\u00e9 osobn\u00ed \u00fadaje jsou zpracov\u00e1v\u00e1ny, odkud poch\u00e1zej\u00ed, jak jsou zabezpe\u010deny a s k\u00fdm jsou sd\u00edleny. Ide\u00e1ln\u00ed cestou je prov\u00e9st informa\u010dn\u00ed audit v cel\u00e9 organizaci.<\/div>\n
<\/div>\n
<\/div>\n
Z\u00e1konnost zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f<\/div>\n
Osobn\u00ed \u00fadaje lze zpracov\u00e1vat pouze na z\u00e1klad\u011b pr\u00e1vn\u00edch d\u016fvod\u016f, kter\u00e9 jsou vymezeny v \u010dl. 6 GDPR. Je tud\u00ed\u017e nutn\u00e9 v r\u00e1mci informa\u010dn\u00edho auditu posoudit, zda zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f m\u00e1 oporu alespo\u0148 v jednom pr\u00e1vn\u00edm d\u016fvodu.<\/div>\n
<\/div>\n
<\/div>\n
\u00daprava t\u00e9m\u011b\u0159 v\u0161ech dokument\u016f a zaveden\u00ed bezpe\u010dnostn\u00edch protiopat\u0159en\u00ed<\/div>\n
Je t\u0159eba prov\u00e9st aktualizaci dokument\u016f, kter\u00e9 obsahuj\u00ed osobn\u00ed \u00fadaje. Jedn\u00e1 se tak p\u0159edev\u0161\u00edm o smluvn\u00ed, dodavatelsk\u00e9 i zam\u011bstnaneck\u00e9 vztahy. D\u00e1le je t\u0159eba prov\u00e9st anal\u00fdzu rizik a aktualizaci vnit\u0159n\u00edch p\u0159edpis\u016f upravuj\u00edc\u00edch ochranu osobn\u00edch \u00fadaj\u016f.<\/div>\n
<\/div>\n
<\/div>\n
Zaveden\u00ed proces\u016f pro realizaci pr\u00e1v subjekt\u016f \u00fadaj\u016f<\/div>\n
\n
Je t\u0159eba zav\u00e9st procesy, kter\u00e9 zajist\u00ed v\u00fdkon pr\u00e1v subjekt\u016f \u00fadaj\u016f, nap\u0159. jak prov\u00e9st likvidaci osobn\u00edch \u00fadaj\u016f ze v\u0161ech datab\u00e1z\u00ed \u010di poskytnut\u00ed informac\u00ed ve strukturovan\u00e9m, b\u011b\u017en\u011b pou\u017e\u00edvan\u00e9m a strojov\u011b \u010diteln\u00e9m form\u00e1tu.<\/div>\n
    \n
  • pr\u00e1vo na p\u0159\u00edstup k osobn\u00edm \u00fadaj\u016fm<\/li>\n
  • pr\u00e1vo b\u00fdt informov\u00e1n<\/li>\n
  • pr\u00e1vo na opravu<\/li>\n
  • pr\u00e1vo na v\u00fdmaz<\/li>\n
  • pr\u00e1vo na omezen\u00ed zpracov\u00e1n\u00ed<\/li>\n
  • pr\u00e1vo na p\u0159enositelnost \u00fadaj\u016f<\/li>\n
  • pr\u00e1vo vzn\u00e9st n\u00e1mitku<\/li>\n
  • pr\u00e1vo neb\u00fdt p\u0159edm\u011btem \u017e\u00e1dn\u00e9ho rozhodnut\u00ed zalo\u017een\u00e9ho v\u00fdhradn\u011b na automatizovan\u00e9m zpracov\u00e1n\u00ed, v\u010detn\u011b profilov\u00e1n\u00ed<\/li>\n<\/ul>\n
    <\/div>\n
    Polo\u017ete si ot\u00e1zku: Vyhled\u00e1 V\u00e1s syst\u00e9m osobn\u00ed \u00fadaje konkr\u00e9tn\u00edho \u017eadatele a pot\u00e9 jej ze v\u0161ech datab\u00e1z\u00ed nen\u00e1vratn\u011b odstran\u00ed? Kdo bude prov\u00e1d\u011bt rozhodnut\u00ed o v\u00fdmazu? Dok\u00e1\u017ee V\u00e1\u0161 syst\u00e9m ozna\u010dit osobn\u00ed \u00fadaje a ukon\u010dit zpracov\u00e1n\u00ed?<\/div>\n
    <\/div>\n
    <\/div>\n
    V\u00fd\u0161e uveden\u00e9 informace jsou pouze zlomkem nov\u00fdch opat\u0159en\u00ed, kter\u00e9 GDPR zav\u00e1d\u00ed.<\/div>\n
    Doporu\u010duji neztr\u00e1cet \u010das a za\u010d\u00edt s implementac\u00ed co nejd\u0159\u00edve. V p\u0159\u00edpad\u011b poru\u0161en\u00ed, nezaveden\u00ed \u010di nep\u0159ipravenosti na GDPR hroz\u00ed velmi vysok\u00e9 pokuty, kter\u00e9 v mnoha p\u0159\u00edpadech mohou b\u00fdt pro spr\u00e1vce \u010di zpracovatele a\u017e likvida\u010dn\u00ed.<\/div>\n
    <\/div>\n
    <\/div>\n
    Na implementaci GDPR nemus\u00edte b\u00fdt samotn\u00ed! Spole\u010dnost FlyEye s. r. o. poskytuje slu\u017eby v oblasti ochrany osobn\u00edch \u00fadaj\u016f z hlediska nov\u00e9 pr\u00e1vn\u00ed \u00fapravy GDPR. V\u00edce informac\u00ed naleznete na www.fly-eye.cz.<\/div>\n
    <\/div>\n
    <\/div>\n
    Mgr. Nikola Dohnalov\u00e1<\/div>\n

    Executive director
    \nFlyEye s.r.o.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

    Mgr. Nikola Dohnalov\u00e1 Executive director FlyEye s.r.o. GDPR, ve sv\u00e9m pln\u00e9m n\u00e1zvu na\u0159\u00edzen\u00ed Evropsk\u00e9ho parlamentu a Rady (EU) 2016\/679 o ochran\u011b fyzick\u00fdch osob v souvislosti se zpracov\u00e1n\u00edm osobn\u00edch \u00fadaj\u016f a…<\/p>\n","protected":false},"author":1,"featured_media":114,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-111","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"jetpack_featured_media_url":"https:\/\/www.apti.cz\/wp-content\/uploads\/2017\/09\/EU_motiv_500x333.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/posts\/111","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/comments?post=111"}],"version-history":[{"count":4,"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/posts\/111\/revisions"}],"predecessor-version":[{"id":1229,"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/posts\/111\/revisions\/1229"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/media\/114"}],"wp:attachment":[{"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/media?parent=111"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/categories?post=111"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.apti.cz\/index.php\/wp-json\/wp\/v2\/tags?post=111"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}