Security of personal data in municipalities: they store sensitive data in drawers under the table

Security of personal data in municipalities: they store sensitive data in drawers under the table

The regulation on personal data protection has been in force in the EU for almost a year and a half. For this period of time, the personal data of EU citizens have been protected in a better way. As we already know, it applies not only to private companies, but also to public institutions, such as banks and municipalities. However, while banks may be sanctioned for breaches of personal data protection, municipalities and regions do not face such sanctions at all.

Violation of the rules results in a sanction of 4% of the company's global revenues, or EUR 20 million, whichever is higher. A record sanction was imposed on British Airways, imposed by the British Data Protection Authority, for up to more than € 200 million. In the Czech Republic, sanctions of a maximum of 10,000 Czech crowns (approximately 380 euros) were imposed.

As mentioned above, municipalities and regions do not have to fear these sanctions at all. "Nevertheless, many of them do not even observe the basic protection of sensitive data," said the head of Algotech, František Zeman. It can be said that while companies invest millions of euros in personal data protection, sensitive data is scattered in drawers in town halls and virtually anyone has access to it.

Even a small violation can cause big problems

If we talk about the misuse of personal data, we think rather of small transgressions, which, however, can have fatal consequences for the lives of aggrieved EU citizens. These are mainly information from executions, leaked photographs, health data, property relations, etc.

The personal data of EU citizens, which are based on filers in municipal offices, or in unsecured computers or emails, can then be easily misused. "If someone has access to personal data, they can misuse it in many ways, whether it is arranging loans on the Internet, shopping in e-shops, or misusing information about, for example, distrainments or diseases," presents the head of Algotech, František Zeman.

Cloud is supposed to be a solution for municipalities and regions

One of the solutions to fulfill the obligations of GDPR and at the same time have data in a safe place is cloud computing. It is a remote access to programs and services via the Internet.

The solution for fulfilling GDPR obligations and secure data is the cloud. It is a remote access to programs and services via the Internet. "Companies and institutions have a duty to secure the data of their clients and employees. Of course, all rules apply to the cloud, and cloud creators and providers think about it, thus protecting all databases from all threats," added Zeman.

"This solution is becoming more and more attractive for companies, not only for security reasons, but also for cost reduction. For example, a midsize manufacturing company can save hundreds of thousands by moving to the cloud, which it can redirect to areas that grow its own business, ” says František Zeman, adding that "cloud solutions are estimated to reduce companies' IT infrastructure costs by about thirty percent."

Such a solution is very interesting for all companies, mainly for security reasons, but also with regard to cost reduction. "For example, a medium-sized manufacturing company will save hundreds of thousands thanks to the transition to the cloud, which it can redirect to areas that develop its own business," says František Zeman. He adds that, according to estimates, the cloud solution reduces companies' infrastructure costs for IT operations by about 30%.

And what about you? Do you use the cloud as well? If not, think about it. And we will be thinking about what an interesting article we will offer you next time.