The EU General Data Protection Regulation (GDPR), which aims to strengthen the protection of personal data and applies to any organization across the world collecting and/or processing personal data of the EU residents, will be implemented on May 25, 2018. ThroughTek always treats people’s privacy with care of the highest level and strives to improve data security according to the international standards. In line with the GDPR, ThroughTek will be working continuously to ensure data processing is in compliance with data protection laws.
GDPR requires organizations to adopt the following principles for their operations:
1. Lawfulness, fairness and transparency
Data processing must meet the tests described in GDPR and organizations will need to ensure data subjects have full knowledge of the organization processing their data and the way it is being processed. To remain transparent with data subjects, organizations should state in the privacy policy the type of data being collected and the reason it’s being collecting it.
2. Purpose limitation
Personal data can only be obtained for specified, explicit and legitimate purposes.
3. Data minimization
Data collected on a subject should be adequate, relevant and limited to what is necessary in relation to the purposes for which they are being processed.
4. Accuracy
Personal data must be accurate and where necessary kept up to date. Individuals have the right to request that inaccurate or incomplete data be erased or rectified.
5. Storage limitation
Information concerning identification of data subjects should not be retained longer than necessary.
6. Integrity and confidentiality
Personal data must be handled in a manner that ensures appropriate security of the data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage. In 2017, ThroughTek received ISO 27001:2013 Security Certification for its Kalay Platform’s cloud services and IT management systems.
Preparations in compliance with GDPR are well underway to ensure that ThroughTek products and services meet the requirements. Our team is working to review and expand our tools to help users understand their choices with respect to their personal data and maximizing control over their privacy.
