Data Protection Ireland Today

Posted on March 30, 2016 by Security in Shredding

Secure document destruction in Ireland can come in the form of an onsite paper shredding service or an off site paper shredding service. Data comes in many forms and The Data protection Act is in place to ensure that this data is protected.

Data Protection is a vital for a business to succeed and remain in business. If customers or users know that your service does not protect your data. It will be a massive loss to business and business reputation. Your business can suffer from a severe penalty for not protecting your data.

An interesting article written by Colm Gorey titled “3 issues defining data protection in Ireland today” The issues discussed are relevant to today’s business. The 3 topics discussed were:

ISO 27018: Cloud computing privacy standard – one year on
Personal data and your right to access it — Ireland vs the UK
Challenges to data protection under the internet of things

The first point talks about the governing of personal data through cloud based systems. Standards have being created to ensure the protection of data and were received well by Data Security experts. The ISO 27018 standard can be read here. Cloud computing has become a major asset to business functionality and knowing what cloud based systems are doing with your data should be investigated and researched when changes if any occur.

The second point refers to Irish and English law. Although both countries have similarities the law for each country does vary and in particular with personal data and access to it. Your business must abide by the rules in place of the country it is based in. A good example of how country laws differ can be read at this link.

Awards of Damages for Data Protection Breaches – UK and Irish Approaches Contrasted

Thirdly the internet of things (IOT) refers to the general use of internet and internet services. Governments and official bodies are trying to develop ideas or frameworks that will regulate the internet of things. What has happened is the EU 28 data protection bodies.

for more information on data protection and a confidential shredding service please visit: https://www.securityinshredding.com/

Security in Shredding

Specialising in secure confidential document shredding services with a reputation for exceptional security, customer service. Delivering value for money and the utilisation of leading technology compliant to the highest security standards within the industry.

Paper Vs Digital Data

Posted on March 24, 2016 by Security in Shredding

Paper Data & Digital Data are both equally as important to protect from data breaches. A Paper Shredding Service should provide a Din 66399 Standard when shredding documents. This ensures that documents are destroyed beyond repair. While this deals with paper data and documents. Your digital data is just as vital to protect.

We now live in a digital age. With the increase in usage of electronic devices and data is accessed and viewed digitally. This has caused a decrease in print media. Forbes magazine released a interesting article about the benefits of print media.

Over the past decade media has switched to digital based as people now access information through digital media. While there wont be a switch back to print media recent neuroscience research has shed new light on this form of media.

“Direct mail requires 21% less cognitive effort to process than digital media (5.15 vs. 6.37), suggesting that it is both easier to understand and more memorable. Post-exposure memory tests validated what the cognitive load test revealed about direct mail’s memory encoding capabilities. When asked to cite the brand (company name) of an advertisement they had just seen, recall was 70% higher among participants who were exposed to a direct mail piece (75%) than a digital ad (44%).

The study continues and explains how paper causes an emotional response to the brain:

Physical material is more “real” to the brain. It has a meaning, and a place. It is better connected to memory because it engages with its spatial memory networks.
Physical material involves more emotional processing, which is important for memory and brand associations.
Physical materials produced more brain responses connected with internal feelings, suggesting greater “internalization” of the ads.

Your recall is better from paper media. So don’t throw out the printer just yet. Accessibility of data may be easier digitally but data will be read and learned better from paper. Whatever method you choose it is important to know that the data needs to be protected.

Data protection laws are in place for businesses that contain sensitive data. With paper a confidential shredding service should be implemented for your business to dispose of sensitive data in a secure manor.

For information on a confidential shredding service please visit:

https://www.securityinshredding.com/

Read the Forbes full article here:

https://www.forbes.com/sites/rogerdooley/2015/09/16/paper-vs-digital/#5d5ee8301aa2

Security in Shredding

Dangers Of Data Breaches For Small Businesses

Posted on March 23, 2016 by Security in Shredding

Secure document shredding in Dublin and throughout the country are services needed to ensure your business is complying with Data Protection laws. These laws are in place to ensure businesses that possess sensitive data are protecting against vulnerabilities both physically and digitally.

Cyber criminals will target small businesses. In the UK the minister for the digital economy Ed Vaizey outlined (2015) that a major security breach for a small business in the UK could cost as much as £310,800. This figure also applies to Irish businesses and any small business in operation.

Dataprotection.ie have detailed descriptions on how to protect your business and improve its security. The site has guidelines to improve your business security. Researching online can be difficult because you will read conflicting reports and incorrect information. The data protection site provides you with useful and up to date information from a governing body to help improve your business security and data protection.

On the site is a guideline to improve your data security. It covers the law to software and IT support to use. With a little bit of know how and awareness to possible threats will benefit you and your business greatly.

There are 19 steps in total on the guideline page which can be read in full at data security guideline page, below are a steps from said list.

1. Install an Anti Virus Software

It is a necessity for any electronic device that transfers data. Anti Virus software protects more than just your computer, it also protects your emails and personal details when online. Malware is a big threat to computers and using a reputable ant virus will benefit.

Remember to update the anti virus software regularly as anti virus software can only protect against known viruses.

2. Firewalls

Firewalls are a essential form of protection where there is external connection. Always on internet is now a common practice for businesses. This makes a properly configured firewall a good form of security.

3. Wireless networks

When using a wireless network in your own business network make sure that proper encryption is setup on the wireless network. Be aware when using public networks such hotels and airports can potentially a risk. Use it if necessary and if you are transferring personal data make sure to be in a secure session on the device.

4. Human Factor

Is often over looked and is often used to breach a business. For example cyber criminals have accessed user accounts by using passwords such as “123456” and or “password.” Sounds crazy but happens more often than you would think. Use a more cryptic password. What the password contains will help its strength but the more characters used the greater the strength.

Also be aware of printed documents that may contain sensitive data and if not disposed properly can be accessed. Having a reputable Shredding Service dispose of your documents securely and safely.

For more information on a secure shredding visit: https://www.securityinshredding.com/ for more information.

Security in Shredding

Choosing A Shredding Service Dublin Area

Posted on March 16, 2016 by Security in Shredding

Secure document shredding services are available throughout Dublin and greater Dublin area. Onsite paper shredding services in Dublin are available to benefit you and ensure your documents are securely dealt with.

Data protection and Data destruction methods are now mandatory for all businesses. The Data Protection Act requires you to have these methods in place or you could be liable for any data breaches if they occur. Sensitive or personal data that is not secured is often the cause of identity theft. It can easily be done if documents are not securely destroyed.

Before choosing a shredding service, it is worth researching the shredding service before using them.

What to look for when choosing a shredding service:

A Compliant Secure Shredding Service

Ensuring that the shredding service is both professional and secure in its business document destruction. The Din 66399 and EN 15713 standard should be sought when choosing your shredding service. This is a European standard and shredding companies must comply by these standards.

What to Shred

If your business uses and or posses a person’s information, then a shredding service is required and should be implemented by all organisations.

The link details the kind of information that needs to be shredded.

What To Shred

On Site Document Destruction Service.

A reputable shredding service will be able to call out to your premises regardless of location. The on site call out can save you and your organisation on time and effort and the document destruction can also be supervised by a member of staff to ensure documents are being destroyed in a professional manner.

Shredding Volumes

It is also worth researching the volumes of paper a shredding company can handle for your business. Your business or organisation may have a large quantity of documents with your own and other sensitive information that you don’t want accessible to people outside of the company.

References

Enquiring with other companies that use a shredding service in their business is worth looking into. It is important to know how the shredding service works and if it will apply to your own organisation. if the shredding company has satisfied customers is worth researching before committing to the service.

For more information on secure document and bulk paper shredding please visit:

https://www.securityinshredding.com/

Security in Shredding

Methods Aimed To Prevent A Data Breach Within An Organisation

Posted on February 16, 2016 by Security in Shredding

Along with a onsite paper destruction service, businesses on-line and electronic data can be vulnerable to a data breach if not adequately protected.

A data breach can occur from a small genuine mistake to a significant planned breach. In this article we will discuss methods any Organisation can take to help prevent a data breach occurring and in turn minimise the risks of experiencing negative public image and damaging press.

Training: All employees that handle sensitive documents and/or have control over/access to sensitive digital data should be trained appropriately. All employees should be made aware of the applicable Data Protection Act principles both at an Irish level and a European Level. External obligation through legislation is important for all employees to be informed of however internal policies must be drawn up and communicated to all staff members.

Risk Assessment: All Organisations should conduct a risk assessment of their IT systems which in turn will help them to identify security threats and improve upon potential weaknesses.

Penetration Protection: Up to date anti malware software should be used to detect potential damaging malware on employee work devices. Periodic reviews should be complete to ensure that firewalls will defend against malware.

Encryption: All data inclusive of static data on external storage devices and data in motion which is data being sent between two separate devices should be encrypted. Encryption If information or devices are stolen; thieves will not be able to access the sensitive information.

Monitoring: We advise that employees should physically protect both electronic devices and paper records in their possession that contains sensitive data. While a Clean Desk Policy can help, it is sometimes difficult for an Organisation to ensure that employees keep their desk clean.

Control Access: Different members of an Organisation will need to access sensitive information at different times. Employees at each level should only have access to information that is relevant and required to their job. A secure ID system should be implemented within your Organisation that will only allow specific employees access to specific information whether it be on a device or on a paper record.

Physical Safeguards: Limit physical access to facilities where Company IT is housed. All hard drives and e-media should be securely destroyed in line with EN 15713 through a Data Processing firm when they are being replaced and/or updated. All organisation should partner with a document destruction expert that provides secure onsite paper shredding Dublin and secure offsite paper shredding Dublin. These data processing firms should have the capability to securely destroy both physical data held in paper format and digital data held on old hard-drives and data cartridges.

For more information please Email us : info@securityinshredding.com

Security in Shredding

Importance of Paper Shredding Dublin for Business

Posted on February 16, 2016 by Security in Shredding

All businesses in Dublin and the surrounding regions will produce confidential paper from their daily activities. This paper may vary in kind, content, life cycle and legislative responsibility however, the risk will remain with your Organisation.

Within the general waste and recycling industry there is a “producer pays” slogan which means that the producer of the waste has the responsibility to dispose of the waste, in a Data Protection context it is similar where the Data Controller has full responsibility over the material and how it is destroyed through a shredding service and how it is to be disposed of once it has completed the document shredding process.

Whether it be onsite paper shredding Dublin and/or offsite paper shredding Dublin a professional service should be implemented in all organisations within all industries to minimise and eliminate where possible the risks of a data breach.

Document shredding Dublin is not the only method for Organisation to ensure compliance with the Law, there are also Nationwide paper shredding companies that can provide shredding services to clients right across the Island of Ireland.

History has taught us great lessons in the importance of Data Protection for businesses. We have seen companies lose thousands of Euros, destroy their trust with customers and in some cases go into receivership due to negligence with the management of data.

All it takes is one mistake for sensitive data to end up in the wrong hands which can be detrimental for your Business and the future of your business. With the aid of experienced well trained data processing professionals an annual costing can be calculated in order for your Organisation to implement a professional paper shredding Dublin service that in turn will protect your business going into the future.

Fraud has been and still is the fastest growing crime in Ireland and Globally and with this in mind it is essential for you and your Organisation to implement a professional Document Shredding Dublin service and make certain that you are abiding by the law surrounding your documents.

If you require any information upon any of the above, please contact www.securityinshredding.com and the compliance team will aid you in your query.

Or Email us : info@securityinshredding.com

Security in Shredding

Paper Shredding Dublin

Posted on December 16, 2015 by Security in Shredding

This brief blog article will focus upon the topic of Paper Shredding Dublin and will share some insight into unacceptable high risk practices with some links to helpful guidance websites to help with the decision making when establishing a document shredding protocol and digital data destruction protocol within your Organisation and households in Ireland.

Data Protection and the ethical procedures for the disposal of end of life data is essential for all in today’s ever evolving data world. Hard-Drives, CD’s, Data Cartridges and Paper files are the main methods for experiencing a damaging and painful data breach.

Protecting your Physical Data and in turn your Personal Identity is vital for all today and a data destruction Dublin service is the most suitable and compliant method for Organisations operating in Ireland and us the Irish citizens to assert the protection of our information.

High risk practices;

Following the guidance of other Organisations both in the Private Sector and Public Sector;

With the advances in data reconstruction technology, increasing levels of data crime, extreme forces for lower costs in addition to contradicting and mind boggling information, simply looking at an alternative Organisation (Private &/or Public) to mimic their procedures and practices is not an appropriate method to establish your own data procedures and practices for managing sensitive paper documents. As we in Ireland are a member of The European Union we are subject to European Legislation in addition to Irish Data Protection Legislation. This point also raises the level of risk of data protection when looking at other Organisations as there have been many different views upon the legislation and the application of it in our Country.

During the Thanks Giving period in The US an extremely serious Data Breach occurred where paper documents containing personal information were found dumped in a recycling centre. These documents were traced back to a hospital which may now be in line to face serious fines and penalties. The affected parties were contacting and apologies were given on behalf of the hospital.

In November of 2015 in our own home Country of Ireland we have seen a data breach occur in one of our Hospitals which in turn personal patient records were found in a recycling bin on the street outside the Hospital.

I want to highlight these two examples as it is important to note that the protection of personal data is a global issue and it is not to be underestimated. These examples also highlight that Companies in the Dublin Region that wish to establish a Dublin Paper Shredding Service and look for guidance from Organisations either in the Private or Public Sectors may lead to data breaches which in turn may lead to negligence penalty enforcement’s. Independent research from reputable information sources that has the protection of personal sensitive data as their number one concern is the most appropriate method for establishing your data protection procedures.

2. Allowing you Waste Management firm to manage your end of life personal sensitive data;

This point is of serious concern for all Organisations and citizens of Ireland to ensure the protection of their personal sensitive paper data. This article is not to negatively market waste operating firms as many of them do an amazing and admirable job at protecting our environment, producing waste fuel for export to incinerators, collecting household waste, running recycling centers, separating and segregating waste materials and selling waste commodities to the recycling industry for maximum revenues not to mention the hundreds of people that are employed through waste operators, they truly are appreciated. When it comes to personal sensitive data and the appropriate disposal of that data there are specialist firms within the market that are subject to additional standards, certifications and best practices which may not be the case for many waste operators who do not have confidential shredding as their primary business case. There is also an industry representative body for these professional specialist firms to ensure industry best practices. If you are specialist data destruction firm (Paper Shredding Firm) you are a Data Processor and recognised as a data processor under legislation. When you are a data processor you are subject to additional legislation from both Ireland and Europe and you are accountable for breaches of the legislation. If you are a waste operator managing waste services you may not be recognised as a data processor but as a materials processor. With this point, if a data breach occurs the Data Processor liability under data protection legislation may not be valid and there may not be accountability in the case of your data breach.

3. Empowering staff with the responsibility to destroy your end of life data;

When deciding whether or not to give staff the responsibility of destroying their end of life data or hiring in temporary or work experience staff it is important to take into account the following factors

Have you provided adequate training for staff
Have you included their responsibilities in their employment contracts
Have you received an audit trail for your material
Do you have proof of destruction
Do you have proof of recycling
Have you destroyed the data to the appropriate shred size
Have you completed a cost benefit analysis on the activity
Are staff being taken away from other activities
Have you singed confidentiality agreements
Have you conducted background checks upon staff

The risks when destroying data outweigh the benefits of completing the process in-house. When dealing with risk it is impossible to eliminate the risk however it is possible to minimise the risk levels and with this in mind it is important to look for a professional specialist shredding firms to manage your destruction requirements and ensure compliance to save you from possible data breaches.

If you require any further information to better help equip yourself from experiencing a damaging data breach please do not hesitate to contact the Security in Shredding Team for friendly helpful guidance with no obligations. You may also want to visit the following sites;

Security in Shredding

Security In Shredding Blog

Security In Shredding Blog

Tag Archives: Paper Shredding Dublin

Paper Vs Digital Data

Methods Aimed To Prevent A Data Breach Within An Organisation

Importance of Paper Shredding Dublin for Business

Paper Shredding Dublin

ISO 27018: Cloud computing privacy standard – one year on

Personal data and your right to access it — Ireland vs the UK

Challenges to data protection under the internet of things

for more information on data protection and a confidential shredding service please visit: https://www.securityinshredding.com/

1. Install an Anti Virus Software

2. Firewalls

3. Wireless networks

4. Human Factor

A Compliant Secure Shredding Service

What to Shred

On Site Document Destruction Service.

Shredding Volumes

References