{"id":36597,"date":"2021-03-22T18:41:03","date_gmt":"2021-03-22T17:41:03","guid":{"rendered":"https:\/\/www.krivak.sk\/?p=36597"},"modified":"2021-03-22T18:41:03","modified_gmt":"2021-03-22T17:41:03","slug":"mozno-spristupnit-doverne-a-citlive-informacie-pri-audite-procesov-v-spolocnosti","status":"publish","type":"post","link":"https:\/\/www.krivak.sk\/eng\/mozno-spristupnit-doverne-a-citlive-informacie-pri-audite-procesov-v-spolocnosti\/","title":{"rendered":"<i class='fa fa-comments'><\/i> Mo\u017eno spr\u00edstupni\u0165 d\u00f4vern\u00e9 a citliv\u00e9 inform\u00e1cie pri audite procesov v spolo\u010dnosti?"},"content":{"rendered":"<h3><strong>Na\u0161a poradensk\u00e1 spolo\u010dnos\u0165 vykon\u00e1va okrem in\u00e9ho tie\u017e audit efekt\u00edvnosti procesov v\u00a0spolo\u010dnostiach pracuj\u00facich najm\u00e4 v\u00a0oblasti r\u00f4znych komunika\u010dn\u00fdch a\u00a0d\u00e1tov\u00fdch slu\u017eieb. Na\u0161\u00edm cie\u013eom je n\u00e1js\u0165 slab\u00e9 miesta a\u00a0navrhn\u00fa\u0165 zmeny ved\u00face k\u00a0zn\u00ed\u017eeniu n\u00e1kladov, zr\u00fdchleniu pracovn\u00fdch cyklov, zavedeniu inov\u00e1ci\u00ed, roz\u0161\u00edreniu klientskej z\u00e1kladne a zv\u00fd\u0161eniu profitu. Ako predpoklad uskuto\u010dnenia procesn\u00e9ho IT auditu sme si od klienta vy\u017eiadali zmluvy s\u00a0jeho k\u013e\u00fa\u010dov\u00fdmi dod\u00e1vate\u013emi a aj\u00a0zmluvy s\u00a0jeho z\u00e1kazn\u00edkmi. Klient namietal, \u017ee n\u00e1m zmluvy spr\u00edstupni\u0165 nem\u00f4\u017ee, preto\u017ee by t\u00fdm poru\u0161il povinnosti dodr\u017eiavania d\u00f4vernosti citliv\u00fdch inform\u00e1ci\u00ed dohodnut\u00e9 v\u00a0zmluv\u00e1ch s\u00a0dod\u00e1vate\u013emi a\u00a0s\u00a0ve\u013ek\u00fdmi firemn\u00fdmi z\u00e1kazn\u00edkmi. Pri z\u00e1kazn\u00edkoch spotrebite\u013eoch pouk\u00e1zal tie\u017e na\u00a0nemo\u017enos\u0165 spr\u00edstupnenia osobn\u00fdch \u00fadajov bez riadneho pr\u00e1vneho z\u00e1kladu. Bez toho, aby sme citliv\u00e9 \u00fadaje z\u00edskali, nevieme IT audit uskuto\u010dni\u0165 a\u00a0tak\u00fdto audit procesov je predmetom na\u0161ej profesion\u00e1lnej \u010dinnosti. Existuje pre n\u00e1s v\u00a0tomto oh\u013eade v\u00fdnimka? Ako m\u00f4\u017eeme klienta presved\u010di\u0165, \u017ee n\u00e1m citliv\u00e9 \u00fadaje spr\u00edstupni\u0165 m\u00f4\u017ee?<\/strong><\/h3>\n<h6><\/h6>\n<p>V \u00a0prvom rade je potrebn\u00e9 uvies\u0165, <strong>\u017ee ako poradensk\u00e1 spolo\u010dnos\u0165 nem\u00e1te \u017eiadnu automatick\u00fa v\u00fdnimku, ktor\u00e1 by V\u00e1s opr\u00e1v\u0148ovala na pr\u00edstup k\u00a0inform\u00e1ci\u00e1m chr\u00e1nen\u00fdm \u010di u\u017e zmluvne alebo predpismi o ochrane osobn\u00fdch \u00fadajov.<\/strong> Nem\u00e1te postavenie \u0161tatut\u00e1rnych aud\u00edtorov a\u00a0klient V\u00e1m nie je povinn\u00fd poskytn\u00fa\u0165 Vami po\u017eadovan\u00e9 inform\u00e1cie na z\u00e1klade pr\u00e1vnych predpisov. Poskytuje V\u00e1m ich preto, lebo si u\u00a0V\u00e1s objednal ur\u010dit\u00fa slu\u017ebu. T\u00e1 slu\u017eba m\u00e1 pravdepodobne vies\u0165 k\u00a0zlep\u0161eniu poskytovania jeho slu\u017eieb, ni\u010d to v\u0161ak nemen\u00ed na tom, \u017ee <strong>Va\u0161e pr\u00e1vo z\u00edska\u0165 citliv\u00e9 inform\u00e1cie nevypl\u00fdva zo \u017eiadneho z\u00e1kona.<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>\u010ealej <strong>je potrebn\u00e9 rozli\u0161ova\u0165 medzi<\/strong> <strong>spr\u00edstupnen\u00edm citliv\u00fdch inform\u00e1ci\u00ed<\/strong> zo zml\u00fav uzatvoren\u00fdch s\u00a0dod\u00e1vate\u013emi a\u00a0s <strong>firemn\u00fdmi z\u00e1kazn\u00edkmi<\/strong> a\u00a0spr\u00edstupnen\u00edm osobn\u00fdch \u00fadajov nach\u00e1dzaj\u00facich sa v\u00a0zmluv\u00e1ch <strong>so z\u00e1kazn\u00edkmi \u2013 fyzick\u00fdmi osobami<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Zmluvy s\u00a0dod\u00e1vate\u013emi obvykle obsahuj\u00fa ustanovenia o\u00a0povinnosti ml\u010danlivosti a\u00a0ochrane d\u00f4vern\u00fdch inform\u00e1ci\u00ed<\/strong>. V\u00a0t\u00fdchto ustanoveniach sa m\u00f4\u017ee nach\u00e1dza\u0165 v\u00fdnimka opr\u00e1v\u0148uj\u00faca V\u00e1\u0161ho klienta poskytn\u00fa\u0165 za ur\u010dit\u00fdch podmienok d\u00f4vern\u00e9 \u00fadaje profesion\u00e1lnym poradcom, pri\u010dom Vy by ste mohli spada\u0165 do kateg\u00f3rie tak\u00fdchto poradcov. Z\u00e1le\u017e\u00ed to v\u0161ak od konkr\u00e9tneho znenia zml\u00fav a\u00a0ak V\u00e1\u0161 klient uv\u00e1dza, \u017ee V\u00e1m zmluvy spr\u00edstupni\u0165 nem\u00f4\u017ee, preto\u017ee by t\u00fdm poru\u0161il zmluvn\u00fa povinnos\u0165, je pravdepodobn\u00e9, \u017ee mu zmluva spr\u00edstupnenie neumo\u017e\u0148uje. <strong>Mohli by mu v\u00a0tejto s\u00favislosti hrozi\u0165 zmluvn\u00e9 sankcie.<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>Sk\u00faste v\u0161ak klientovi navrhn\u00fa\u0165, aby V\u00e1m zmluvy spr\u00edstupnil tak, \u017ee nebudete vedie\u0165 o\u00a0ak\u00e9ho zmluvn\u00e9ho partnera klienta ide. V\u00a0zmluv\u00e1ch zne\u010ditate\u013en\u00ed identitu dod\u00e1vate\u013ea alebo firemn\u00e9ho z\u00e1kazn\u00edka a\u00a0zmluvy ozna\u010d\u00ed napr\u00edklad \u010d\u00edslami. Vy <strong>pos\u00fadite podmienky zml\u00fav na anonymnej b\u00e1ze<\/strong> a\u00a0klient si potom v\u00fdsledok V\u00e1\u0161ho pos\u00fadenia prirad\u00ed k\u00a0anonymizovan\u00fdm zmluv\u00e1m.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>\u010co sa t\u00fdka spr\u00edstupnenia zml\u00fav so z\u00e1kazn\u00edkmi \u2013 fyzick\u00fdmi osobami, ktor\u00e9 obsahuj\u00fa osobn\u00e9 \u00fadaje, najbezpe\u010dnej\u0161ia cesta je tie\u017e anonymizovanie zml\u00fav<\/strong>. Ak to z\u00a0praktick\u00e9ho h\u013eadiska nie je realizovate\u013en\u00e9, mo\u017eno zv\u00e1\u017ei\u0165 existenciu pr\u00e1vneho z\u00e1kladu sprac\u00favania naz\u00fdvan\u00e9ho ako <strong>\u201eopr\u00e1vnen\u00fd z\u00e1ujem\u201c,<\/strong> ktor\u00fd umo\u017en\u00ed klientovi spr\u00edstupni\u0165 V\u00e1m osobn\u00e9 \u00fadaje z\u00e1kazn\u00edkov a\u00a0V\u00e1m umo\u017en\u00ed\u00a0tieto osobn\u00e9 \u00fadaje pre V\u00e1\u0161ho klienta spracova\u0165.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Pri pou\u017eit\u00ed opr\u00e1vnen\u00e9ho z\u00e1ujmu ako pr\u00e1vneho d\u00f4vodu sprac\u00favania osobn\u00fdch \u00fadajov je v\u0161ak nevyhnutn\u00e9 zv\u00e1\u017ei\u0165, \u010di opr\u00e1vnen\u00fd z\u00e1ujem V\u00e1\u0161ho klienta na zlep\u0161en\u00ed efektivity jeho procesov nie je v\u00a0rozpore so z\u00e1ujmami alebo pr\u00e1vami z\u00e1kazn\u00edkov, respekt\u00edve, \u010di pr\u00e1vom chr\u00e1nen\u00e9 z\u00e1ujmy z\u00e1kazn\u00edkov nepreva\u017euj\u00fa nad opr\u00e1vnen\u00fdm z\u00e1ujmom V\u00e1\u0161ho klienta<\/strong>. Tu je potrebn\u00e9 odpoveda\u0165 najsk\u00f4r na viacer\u00e9 ot\u00e1zky tzv. testu proporcionality. Najm\u00e4, \u010di je mo\u017en\u00e9 dosiahnu\u0165 cie\u013e aj bez sprac\u00favania osobn\u00fdch \u00fadajov, ak\u00fd bude praktick\u00fd dopad sprac\u00favania osobn\u00fdch \u00fadajov na z\u00e1kazn\u00edkov, \u010di bude sprac\u00favanie \u00fadajov aj v prospech z\u00e1kazn\u00edkov, pr\u00edpadne ak\u00fd bude ma\u0165 dopad na V\u00e1\u0161ho klienta, ak sa sprac\u00favanie neskuto\u010dn\u00ed. <strong>Tento proces zv\u00e1\u017eenia je vhodn\u00e9 niekde zachyti\u0165<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<p>Domnievame sa v\u0161ak, \u017ee vo Vami op\u00edsanom pr\u00edpade by opr\u00e1vnen\u00fd z\u00e1ujem klienta na zlep\u0161en\u00ed efekt\u00edvnosti procesov mohol preva\u017eova\u0165 nad pr\u00e1vom chr\u00e1nen\u00fdmi z\u00e1ujmami z\u00e1kazn\u00edkov. Najm\u00e4 ak <strong>urob\u00edte potrebn\u00e9 opatrenia na to, aby ste osobn\u00e9 \u00fadaje z\u00e1kazn\u00edkov pri sprac\u00favan\u00ed chr\u00e1nili, podp\u00ed\u0161ete s\u00a0klientom v\u00a0tomto oh\u013eade zmluvu a\u00a0poskytnete mu aj zmluvn\u00e9 z\u00e1ruky ochrany pr\u00e1v z\u00e1kazn\u00edkov \u2013 fyzick\u00fdch os\u00f4b.<\/strong><\/p>","protected":false},"excerpt":{"rendered":"<h3>Na\u0161a poradensk\u00e1 spolo\u010dnos\u0165 vykon\u00e1va okrem in\u00e9ho tie\u017e audit efekt\u00edvnosti procesov v\u00a0spolo\u010dnostiach pracuj\u00facich najm\u00e4 v\u00a0oblasti r\u00f4znych komunika\u010dn\u00fdch a\u00a0d\u00e1tov\u00fdch slu\u017eieb. Na\u0161\u00edm cie\u013eom je n\u00e1js\u0165 slab\u00e9 miesta a\u00a0navrhn\u00fa\u0165 zmeny ved\u00face k\u00a0zn\u00ed\u017eeniu n\u00e1kladov, zr\u00fdchleniu pracovn\u00fdch cyklov, zavedeniu inov\u00e1ci\u00ed, roz\u0161\u00edreniu klientskej z\u00e1kladne a zv\u00fd\u0161eniu profitu. Ako predpoklad uskuto\u010dnenia procesn\u00e9ho IT auditu sme si od klienta vy\u017eiadali zmluvy s\u00a0jeho k\u013e\u00fa\u010dov\u00fdmi dod\u00e1vate\u013emi a aj\u00a0zmluvy s\u00a0jeho z\u00e1kazn\u00edkmi. Klient namietal, \u017ee n\u00e1m zmluvy spr\u00edstupni\u0165 nem\u00f4\u017ee &#8230;<\/h3>","protected":false},"author":32,"featured_media":36599,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[50,51],"tags":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/posts\/36597"}],"collection":[{"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/comments?post=36597"}],"version-history":[{"count":0,"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/posts\/36597\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/media\/36599"}],"wp:attachment":[{"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/media?parent=36597"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/categories?post=36597"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.krivak.sk\/eng\/wp-json\/wp\/v2\/tags?post=36597"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}