Every business gathers information about customers and staff however, some of this data is considered personal and therefore subject to privacy laws. In 2014 an unhappy Morrisons employee leaked contact information for staff and customers. The company was penalized for violating privacy laws. This definition of personal data is used by a variety of international privacy laws, including the EU General Data Protection Regulation.
This includes information about an individual’s behaviors, habits, and affiliations that could be used to identify them. For example, names address, address, email address, or phone number can be used to identify people and also images, videos and recordings of conversations with your staff and customers. The GDPR also requires you protect personal data that is sensitive and imposes disclosure and consent requirements.
Many privacy laws around the globe provide better protection for sensitive data. This can include biometric, health, or political association information. You usually need express, unambiguous consent to process sensitive information, and the level of security you must afford it will differ depending on the laws of the jurisdiction you reside in.
It is possible that you will need to take inventory of all computers, laptops digital copiers, as well as other equipment used in your business to determine where you keep your personal information. It is recommended to check your computers and file cabinets as well as home computers, flash drives, mobile devices and other equipment used by your employees. Also, you should consider the personal data your business receives from third parties and suppliers.
www.bizinfoportal.co.uk/2021/04/01/maximizing-your-business-information-portal/