10 tips to prevent data leaks
22 June 2021A data leak can cause a lot of damage to a company's image and continuity, but also to the lives of the data subjects. Prevent data leaks and talk about them with each other, because unconsciously employees are the weakest link!
What is a data leak?
They appear in the news daily: data leaks. Every organization can face them. Strictly speaking, you refer to a data leak when it concerns the unintentional destruction, loss, alteration, and sharing of personal data.
If you lose a USB stick with personal data, that is a data leak; if your laptop is stolen, that is a data leak. A hacker can break in and view or exfiltrate a database; that is a data leak. Also, if you accidentally send an email to someone when that email was intended for someone else, there is a data leak. Data leaks arise due to hacks and attacks, but especially through human error.
Do you have to report a data leak?
Only data leaks that pose a high risk to the data subjects must be reported. A data leak that does not pose a risk does not have to be reported but must be recorded internally. If you are the processor of the data, the leak must be reported within 72 hours. When it concerns personal data and a high risk for the data subjects, you have a notification obligation towards your customers (the data subjects) and they must be informed about the consequences. These agreements are set out in a processing agreement.
If you are dealing with a serious data leak, you must report it to the Dutch Data Protection Authority (AP).
10 tips to prevent data leaks
- Talk to your employees about it; the employee is the weakest link!
- Appoint an internal data protection officer
- Ensure a good password policy
- Encrypt sensitive data
- Do not collect unnecessary data
- Do not send personal data via free apps and email accounts
- Map data flows
- Choose data storage in the Netherlands
- Protect against ransomware
- Invest in ICT security
