Loading...
| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 1.45 MB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
As novas tecnologias permitem às empresas privadas e às entidades públicas a utilização de dados pessoais numa escala sem precedentes no exercício das suas atividades, no entanto, não é pelo facto de alguém entregar dados pessoais a uma organização que deixa de ser o proprietário ou titular dos mesmos, e quem os recebe tem o dever de respeitar essa titularidade.
O presente estudo tem como objetivo a proposta de medidas de mitigação dos riscos para os direitos dos titulares dos dados, associados ao processo de gestão de perfis de acesso aos dados pessoais dos RH da FA, presentes no SIGDN-RH, no âmbito da implementação do RGPD. Através de um raciocínio dedutivo, obtêm-se respostas para uma área de conhecimento científico recente e pouco desenvolvida, baseando-se numa estratégia de investigação qualitativa.
O processo de gestão de perfis de acesso aos dados pessoais dos RH da FA, presentes no SIGDN-RH, é caraterizado e verificado quanto à sua conformidade com os princípios fundamentais: a necessidade e a proporcionalidade de processamento e a proteção dos direitos dos titulares dos dados pessoais. Os riscos associados ao processo são avaliados quanto à sua probabilidade e gravidade, e consequentemente, identifica-se um conjunto de medidas mitigadoras dos mesmos.
New technologies allow private companies and public entities to use personal data on an unprecedented scale in the exercise of their activities, however, it is not because someone delivers personal data to an organization that they are no longer the owner or holder of the data themselves, and whoever receives them has a duty to respect that title. This study aims to propose risk mitigation measures for the rights of data subjects, associated with the process of managing profiles of access to the personal data of the HR of the FA, present in the SIGDN-RH, within the scope of the implementation of the GDPR. Through deductive reasoning, answers are obtained for a recent and undeveloped area of scientific knowledge, based on a qualitative research strategy. The process of managing the profiles of access to the personal data of the HR of the FA, present in the SIGDN-RH, is characterized and verified regarding its compliance with the fundamental principles: the need and proportionality of processing and the protection of the rights of the data subjects personal. The risks associated with the process are assessed for their probability and severity, and consequently, a set of mitigating measures is identified.
New technologies allow private companies and public entities to use personal data on an unprecedented scale in the exercise of their activities, however, it is not because someone delivers personal data to an organization that they are no longer the owner or holder of the data themselves, and whoever receives them has a duty to respect that title. This study aims to propose risk mitigation measures for the rights of data subjects, associated with the process of managing profiles of access to the personal data of the HR of the FA, present in the SIGDN-RH, within the scope of the implementation of the GDPR. Through deductive reasoning, answers are obtained for a recent and undeveloped area of scientific knowledge, based on a qualitative research strategy. The process of managing the profiles of access to the personal data of the HR of the FA, present in the SIGDN-RH, is characterized and verified regarding its compliance with the fundamental principles: the need and proportionality of processing and the protection of the rights of the data subjects personal. The risks associated with the process are assessed for their probability and severity, and consequently, a set of mitigating measures is identified.
Description
Keywords
RGPD Risco Sistema de informação Recursos Humanos AIPD GDPR Risk Information system Human resources DPIA