The privacy and laws
If some company collects the data of the personal use of the Internet, that company should have the ability to store and secure that data. So why there are not strict regulations of the standards, what those companies should follow, if they are collecting the personal data. Collecting personal data should be made to need the subject of the license.
That standard is known as GDPR, and it's the law of data security in the European Union(1). The thing in the data protection is that those companies should follow those regulations also in their overseas offices, and everywhere where is the access to that data. The thing is that the remote use of the servers must follow the standards of the GDPR. And that data must be confirmed secured in all the points, where it is visible.
(1) https://www.dlapiperdataprotection.com/index.html?t=law&c=DE
Image: https://dc.mynetworkinsights.com/wp-content/uploads/2019/11/What-is-data-center.jpg
----------------------------------------------------
All data must handle and store in protected places
When some data is stored in the server that is operated by some company, the data is not automatically secured. That thing means that the data can be shared over the same network segment and controlling that data is impossible. The thing that people should concern about their data security is that somebody has been stolen the surveillance programs from the intelligence services, and then use those codes in their purposes.
So the problem with private corporations is that they don't operate their servers with themselves, and that means that the operators of the servers can backup data to every place on Earth. Or another problem is that the physical servers or network routers can be alone in a long time, and the hackers can adjust those routers to route a copy of the entire data flow to the third party.
And the problem is that the laws are not stopping hackers. The thing in the laws is that there should be standards, that the operators must use for guarding their networks, and the other thing is that those regulations must be updated simultaneously and following those regulations must be followed.
When we are thinking about the possibility to collect the data, we must understand that the firms, that are collecting the user data must have value and ability to handle personal data. If some company doesn't follow the standards and instructions the license for collecting the data should be denied. The strict laws and orders should make strict regulations, which must be followed by companies, which are collecting personal data, which can be very vulnerable.
Comments
Post a Comment