LOPD Adjustment / Audit
On June 1th, 1999 is published the Royal Decree 994/99 that develops the Regulation of Measurements of Security of the files that contain personal information and on December 13rd, 1999 is published the Personal Data Protection Organic Law (LOPD), which repealed the original LORTAD of 1992.
Since then the resources have grown, so much budgetary as technological, assigned to the Data Protection Agency (APD), Administrative Autonomous Entity dependent on the authority dictated by Brussels and responsible of the fulfillment of the existing legislation, including important functions of inspection and punishment to these companies.
Internet Security Auditors, worried in offering the necessary Security services in order that our clients can develop its business with the major tranquility, offers the services of Adjustment and Audit of the aspects that defines the legislation for Personal Data Protection, that only can be effective if Technology and Law combine.
Service Characteristics of LOPD Adjustment
- Data Legitimization: Consist of doing the analysis of the correct possession of the assents to treat the information and its scope. It will include the review of the opportune contracts. It also will include the review and adequacy in its case of the web page and the virtual environments to the regulation on the treatment of information on-line and the review of the contracts with the ISP in everything that all those things relating to the data protection.
- Security Measurements: Consist in the review of the implantation to juridical level of the Security Measurements contemplated in the RD 994/99, including the accomplishment, in its case, of the obligatory Security Document.
- Authorization of the files: Consists of the review, declaration, update or suppression of the files registered in the Data Protection General Record (AEPD).
- Security Measurements Technical Review: Consists of the review, in technical level, of the storage, protection and type of access to verify that there are fulfilled the necessary measurements imposed by the legislation, always depending on the level of the information with which one works
Service Characteristics of LOPD Audit
- Review of the realized measurements: Will consist of the review of all those measurements that have been taken before in the company, as for the adequacy to the legislation about Personal Data Protection.
- Technical Audit: In this case are analyzed the technical measurements adopted by the company to study if they are the most suitable ones and, therefore, depending on the level of the data that the company handles for his correct protection.
- Report of the Audit: Complete Report where appear all results, exceptions, etc. and all that have been found during the previous processes.