Scribd Logo
Upload

Welcome to Scribd!

  • 69 views

    D-1 SupplierDataProtectionRequirements v.2

    Uploaded by

    Maria Princess Altura
    This document summarizes a supplier's compliance with data privacy requirements across six sections. The supplier is compliant or has measures in place for requirements related to data privacy governance, risk assessment, privacy culture, privacy in operations, managing security risks, and data breach management. However, the supplier is non-compliant for the requirement to formulate a Privacy Management Program. Overall, the supplier meets most of the data protection requirements.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    D-1 SupplierDataProtectionRequirements v.2

    Uploaded by

    Maria Princess Altura
    69 views1 page
    This document summarizes a supplier's compliance with data privacy requirements across six sections. The supplier is compliant or has measures in place for requirements related to data privacy governance, risk assessment, privacy culture, privacy in operations, managing security risks, and data breach management. However, the supplier is non-compliant for the requirement to formulate a Privacy Management Program. Overall, the supplier meets most of the data protection requirements.

    Original Description:

    Sample Data Protection

    Original Title

    Doc D-1 SupplierDataProtectionRequirements v.2

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document summarizes a supplier's compliance with data privacy requirements across six sections. The supplier is compliant or has measures in place for requirements related to data privacy governance, risk assessment, privacy culture, privacy in operations, managing security risks, and data breach management. However, the supplier is non-compliant for the requirement to formulate a Privacy Management Program. Overall, the supplier meets most of the data protection requirements.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    69 views1 page

    D-1 SupplierDataProtectionRequirements v.2

    Uploaded by

    Maria Princess Altura
    This document summarizes a supplier's compliance with data privacy requirements across six sections. The supplier is compliant or has measures in place for requirements related to data privacy governance, risk assessment, privacy culture, privacy in operations, managing security risks, and data breach management. However, the supplier is non-compliant for the requirement to formulate a Privacy Management Program. Overall, the supplier meets most of the data protection requirements.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 1

    SUPPLIER DATA PROTECTION REQUIREMENTS APPLICABILITY RESPONSE SUPPORTING REMARKS

    SECTION ONE: Data Privacy Governance

    With Data Privacy Officer (DPO)


    1 Appointment of a Data Privacy Officer (DPO) Applicable Compliant
    Documents

    2 Registration of Data Processing Systems Applicable Compliant Registration Form

    SECTION TWO: Risk Assessment

    Regular conduct of Privacy Impact Assessments for processes, products,


    3 Applicable Compliant
    or systems that involve the processing of personal data

    SECTION THREE: Privacy Culture

    4 Availability of your organization's Personal Data Privacy Policy Applicable Compliant

    5 Formulation of your organization's Privacy Management Program (PMP) Not Applicable Non-Compliant

    Establishing a culture of privacy through awareness and education


    6 Applicable Compliant
    programs for employees and subcontractors

    7 Issuance of Security Clearance for those handling personal data Applicable Compliant

    SECTION FOUR: Privacy in Day-to-Day Information Lifecycle Operations

    Informing data subjects of any personal information processing


    8 Applicable Compliant
    activities and obtain their consent, when necessary

    Formulation of policies/procedures that allow data subjects to object to


    9 Applicable Compliant
    further processing, or changes to the information obtained from them

    Formulation of policies that limit data processing according to its


    10 Applicable Compliant
    declared, specified, and legitimate purpose

    Formulation of policies/procedures for providing data subjects with


    access to their personal information, including its sources, recipients,
    11 method of collection, purpose of disclosure to third parties, automated Applicable Compliant
    processes, date of last access, and identity of the controller (Data
    Subject Access Request)

    Formulation of policies/procedures that allow data subjects to dispute


    12 inaccuracy or error of their personal information, including Applicable Compliant
    policies/procedures to keep the same up to date

    Formulation of policies/procedures that allow a data subject to suspend,


    13 withdraw, or order the blocking, removal or destruction of their personal Applicable Compliant
    information

    Formulation of policies/procedures for accepting and addressing


    14 Applicable Compliant
    complaints from data subjects

    Formulation of policies/procedures that allow data subjects to get


    indemnified for any damages sustained due to inaccurate, incomplete,
    15 Applicable Compliant
    outdated, false and unlawfully obtained or unauthorized use of personal
    information

    Formulation of policies/procedures that allow data subjects to obtain a


    16 copy of his/her personal data processed by electronic means and in a Applicable Compliant
    structured and commonly used format

    Formulation of policies/procedures for the creation and collection,


    storage, transmission, use and distribution, and retention of personal
    17 data for only a limited period, OR until the purpose of the processing Applicable Compliant
    has been achieved, and ensuring that data is securely detroyed or
    disposed of

    SECTION FIVE: Managing Personal Data Security Risks

    Implementation of appropriate and sufficient organizational security


    18 Applicable Compliant
    measures

    Implementation of appropriate and sufficient physical security measures


    19 Applicable Compliant
    (Physical Access and Security, Design and Infrastructure)

    Implementation of appropriate and suffcient technical security


    20 (Firewalls, Encryption, Access Control Policy, Security of Data Storage, Applicable Compliant
    and Other Information Security Tools)

    SECTION SIX: Data Breach Management

    Compliance with the Data Privacy Act's Data Breach Management


    21 Requirements (e.g. Security Policy, Data Breach Response Team, Applicable Compliant
    Incident Response Procedure, Document, Breach Notification)

    CERTIFIED TRUE and CORRECT by:

    Rudziya Arceo HR Manager April 24, 2019


    Signature over Printed Name Designation Date

    You might also like

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy