Main Body (Essay)

 Main Body

Big companies such as Apple, Facebook, Samsung, etc. benefits from complying with data privacy laws. If they were not to comply with the General Data Protection Regulation (GDPR), penalties and fines imposed might be severe. GDPR requires not just the secure storage of user information, but also the exchange of data upon request. Effective processes for meeting these data governance standards can save money for the company (Emotiv, 2022). GDPR lays out seven principles for processing of personal data correctly. Such as, transparency, limitation, minimisation, accuracy, security, and accountability. Companies can avoid taking risk for data of their costumers by simply following the principles of GDPR (UHI, 2022).  In today's digital age, keeping sensitive data safe from theft and exposure isn't as simple as locking the file cabinet - especially with the increased adoption of cloud computing. Even if all precaution taken with online accounts and personal information, there are several ways for that information to get up in the data management systems of another person or firm, making it vulnerable to data theft or data leaks. Gossels (2021) states that the greatest mistake companies make when it comes to securing and storing sensitive data is, they do not know where their sensitive data is because they do not have policies in place to categorise it systematically and consistently, and as a result, they do not have controls in place to ensure that all kinds of data are handled effectively. For example, if a company has a policy stating that any data set containing personally identifying information is considered "sensitive" and must be encrypted both in network and at rest, and the company has implemented technical controls to enforce that policy, the data set is almost certainly safe. Users must be aware of the sensitive nature of the data they work with and their involvement in ensuring its security. In many circumstances, this involves informing consumers about what they should not do. If a company were to inform the consumers about what to do or not to do, can simply provide examples of data protection technologies. Such as, Backup, Replications, Firewalls, Data Loss Prevention (DLP), Authentication and Authorisation, etc… All examples given should be useful for consumer to understand how to secure the data. (Cloudian, 2022)