Businesses collect data about their employees and customers. However some of this data is personal and may be subject to privacy laws. For example an employee who was disgruntled at UK supermarket chain Morrisons divulged details of contacts for staff and customers in 2014, the business was fined for breaching privacy law. The definition of personal information is a key element in a variety of global privacy laws, including the EU General Data Protection Regulation.

This includes information about the habits, activities of a person and affiliations that can be used to identify them. For example, a person’s name, address, telephone number, email address can all be used to identify people as can videos, photos and even recordings of conversations with your staff and customers. The GDPR also requires that you protect sensitive personal information, and imposes specific disclosure and consent requirements on it.

A variety of privacy laws around the globe provide better security for sensitive information. This could include biometric, health or political affiliation information. You generally need explicit unambiguous, unambiguous permission to process sensitive information, and the level of protection you are required to provide differ depending on the laws of the jurisdiction you reside in.

You might need to conduct an inventory of all computers, laptops digital copiers, and other equipment in your workplace to determine where you keep your personal information. You should look through the cabinets for files and computer systems as well as home computers flash drives, mobile devices and other equipment that your employees use. You must also consider the personal data that your company receives from suppliers or third parties.

http://www.bizinfoportal.co.uk/2021/04/08/how-to-implement-your-business-growth-strategy/