COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY Prof. Veselin Tselkov, DSc – member of the Board Ms Desislava Borisova - chief legal adviser GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Agenda Ø Introduction Ø Good practices Ø Conclusions GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 2
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Introduction „The sovereignty of the society, the region, the nation, the state has their only sense if their real sovereignty is based on the only real sovereignty - the sovereignty of the human being. ” Vaclav Havel GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 3
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The experience of the CPDP Ø Complaints Ø Inspections Ø Data controllers Ø Consultations GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 4
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Strategic principles and priorities during the years Ø The raising of the awareness of the society Ø Training of the data controllers Ø Improving of the system for ensuring data protection Ø Strengthening of the administrative capacity of the Commission for personal data protection GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 5
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Good practices Ø The raising of the awareness of the society Ø The training for the data controllers Ø The methodology for inspections activity Ø Ordinance № 1 dated 30 January 2013 on the minimum level of technical and organizational measures and the admissible type of personal data protection Ø The new information technologies in the work of the CPDP GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 6
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The raising of the awareness of the society Continuous process of the raising of the awareness GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 7
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Main problems Ø Lack of knowledge for the personal data protection problems Ø Lack of assessment of the importance of the problem and the threats Ø Lack of knowledge of the legislative framework Ø Lack of knowledge of the consequences of the violation of the rights GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 8
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Targets for exerting an influence Ø Society Ø State authorities and local authorities Ø Private companies GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 9
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The media Ø Use of media o Electronic media o Other media GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 10
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The media Not only is important for the media to be considered as a corrective, but they also must be seen as a tool for influencing the society and as a key tool of influencing the society and contributing to the right functioning of the data protection system. GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 11
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The media Ø Internet o Website of the CPDP o Social networks o Materials and banners in the most popular websites o Links between the website of the CPDP and other institutions: § State authorities § Industrial sector § Non-governmental organizations GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 13
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Website of the CPDP GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 14
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Website of the CPDP GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 15
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade 10 years Commission for Personal Data Protection GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 16
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The media Ø Internet o Website of the CPDP o Social networks o Materials and banners in the most popular websites o Links between the website of the CPDP and other institutions: § State authorities § Industrial sector § Non-governmental organizations GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 17
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The media Ø Information bulletin o Contemporary trends o Legislative amendments o CPDP’s practices GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 18
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The media The informational brochures can be generally oriented or oriented to stakeholders GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 19
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The media Ø Informational brochures o 10 years of the CPDP o Your identity card o Video surveillance o Internet and children o Advices for parents o Your Schengen Information System’s rights GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 20
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Your identity card GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 21
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Your identity card GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 22
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Video surveillance GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 23
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Video surveillance GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 24
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Internet and children GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 25
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Internet and children GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 26
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Advices for parents GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 27
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Advices for parents GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 28
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The media Ø Special postmark issued on the European Day for personal data protection – 28 th January GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 29
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Special postmark issued on the European Day for personal data protection – 28 th January GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 30
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The other initiatives Ø Examples o National children competition on pictures for Internet as a point of view o Joint and/or external meetings o Doors open days o Public lectures with the academic society GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 31
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade National children competition on pictures for Internet’s point of view – Katya 4 GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 32
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade National children competition on pictures for Internet’s point of view – Mikaela 10 GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 33
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade National children competition on pictures for Internet’s point of view – Elica 14 GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 34
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The other initiatives Ø Joint and/or external meetings o Formal meetings, plenary, workshops § With district governors, mayors, etc. § Thematic meetings with different authorities – Communications Regulation Commission, Commission for consumer protection o Open meetings GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 35
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The other initiatives Ø Joint and/or external meetings o Press conferences with journalists o Doors open days for citizens and data controllers o Training o Law enforcements issues on the application of the Law for electronic communications ( discussions with stakeholders in different places – prosecutors, judges, etc. ) GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 36
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade The other initiatives Ø Promotional information campaign with specific logo: „ 2012 10 years Commission for personal data protection – 28 th January European data protection day” - leaflets, notebooks, badges, placards, cups pens, calendars, as well as flash memories with information about the data protection o Magnetic cartridge o Contents GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 37
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Is the protection of personal data important ? GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 38
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Training. Scope of the training Ø State authorities and local authorities Ø Business organizations Ø Targeted groups Ø Stakeholders Ø Personnel (staff) GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 39
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Training. Common subjects Ø Topical issues of the data protection issues Ø Legal framework of the personal data protection in the Republic of Bulgaria Ø Legal proceedings and supervision Ø Data controllers GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 40
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Training. Specialized training Ø Education Ø Banking Ø Service sector Ø Hotels Ø Health sector Ø Schengen Information System GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 41
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade ORDINANCE № 1 dated 30 January 2013 On the minimum level of technical and organizational measures and the admissible type of personal data protection GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 42
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade ORDINANCE № 1 dated 30 January 2013 Ø General provisions o Confidentiality , integrity and availability o Implementing the need-to-know principle Ø Types of protection Ø Impact assessments Ø Levels of impact Ø Obligations of the controller GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 43
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Methodology for Inspection Activity Ø Methodology of how to carry out an inspection Ø On-going inspections based on a monthly plan of the CPDP o Purpose o Scope o Cases http: //www. cpdp. bg/? p=news_view&aid=478 GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 44
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Plan for Inspections GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 45
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Implementing New Information Technologies in the Work of CPDP Ø Call centre Ø Internet website Ø Information bulletin Ø Maintaining the Register of personal data controllers and the personal data registers kept by them Ø Automated document management system Ø Automated paperless system for open meetings GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 46
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Concusion “We want to open new growth opportunities that Europe needs, and at the same time, we want to make data protection an effective right for everybody. We will deliver effective, practicable and future proof data protection rules that enable growth. ” Viviane Reding GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 47
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade Agenda Ø Introduction Ø Good practices Ø Conclusions GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY 48
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY Prof. Veselin Tselkov, DSc – member of the Board Ms Desislava Borisova - chief legal adviser GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade QUESTIONS ? prof. Veselin Tselkov, DSc – member of the Board Desislava Borisova - chief legal adviser GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY
COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10 -12 th of April 2013, Belgrade QUESTIONS ? Prof. Veselin Tselkov, DSc – member of the Board Ms Desislava Borisova - chief legal adviser GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY
Скачать презентацию COMMISSION FOR PERSONAL DATA PROTECTION BULGARIA Central Eastern
c33ee85a2646c858927691812b2ca132.ppt