#makeahabit personal data protection

We are launching an online campaign to raise public awareness of personal data protection issues.

During 1 month, we will provide you with information about the significant habits that you shall remember in your daily life to protect your personal information.

The illustrated cards, with important advice written on them, will push you to think more in your daily life about why it is so important when giving out your or someone else's data, to constantly be interested in why and for what purpose this information is being requested and whether it complies with the requirements of the law.

In addition, it should be noted that the law cannot regulate every problematic topic in the data protection field. The legislation does not apply to the processing of data for personal purposes, but despite this, it is necessary to establish and form a culture of data protection and respect for personal relationships in society.

The information received within the campaign and compliance with certain rules will prevent certain moral or financial losses in the future.

Worse things can happen when electronic devices are left unattended than prank statuses from friends.

And what is your daily habit that you use to protect your data?

#makeahabit personal data protection

By unobserved and hasty consent to a security policy document, who knows, maybe you're agreeing to the information stored on your electronic device getting into someone else's hands?!

And what is your daily habit that you use to protect your data?

#makeahabit personal data protection

The rules of direct marketing are regulated by law. If a violation is revealed, the more time you delay contacting us, the greater the risk that the company will send additional illegal messages.

And what is your daily habit that you use to protect your data?

#makeahabit personal data protection

When sharing photos for personal purposes, have you thought about the interests of the people who are also covered by the camera lens?

For example, when we share a photo of our child taken with other kids from kindergarten, it is worth considering how much their parents intend to post publicly the said photo?!

Let's establish a culture of data protection together

#Getpermission

Password is the important key that will open the door to other people to a lot of your personal information.

Therefore, when choosing passwords, keep in mind that it is desirable to:

• Use a unique and complex password consisting of a variety of combinations. A strong password means at least 8 to 12 characters, numbers, different symbols, upper and lower case letters;
• Avoid using password saving function;
• If you use a simple and consistent password for several accounts, unauthorized access to one account will put your other accounts at risk.

Let's establish a culture of data protection together

#makeahabit personal data protection

Before you think you've hit the jackpot or been the successor of a prince in a faraway country, hackers may have obtained access to the information on your device.

Phishing is one of the most common forms of online fraud.

Before going to a new link, pay attention to:

• its credibility. The web page address field should include a padlock symbol and the address bar must begin with HTTPS:// and not HTTP:// characters;
• If you think that the link is related to a company you know, take a good look at its inscription, because the difference may be only in one character;
• Avoid entering personal data on foreign links.

Let's establish a culture of personal data protection together

#makeahabit personal data protection

Who do you share personal data with?

Why?

For what purpose are they asking your personal data?‼️ First of all, remember that it is your right to get answers to these questions‼️

The answers to them are a guarantee that you will be able to correctly determine whether you should entrust your personal data to this particular data processor.

Before sharing information, these questions you ask for the first time may be confusing and even annoying for different organizations or even individuals, but we believe that together we can create an environment where the protection of personal data is an equal priority for all parties.

Let's establish a culture of personal data protection together!

#makeahabit personal data protection

The law cannot regulate everything in the field of personal data protection. The legislation does not apply to the processing of data for personal purposes, but despite this, it is necessary to establish and form a culture of data protection and respect for personal relationships in society.

• If you don't like when someone else's private life is discussed in a public space, for example in public transport face-to-face or during a phone conversation;
• If you don't like that your visit to the doctor was discussed with everyone by an acquaintance who happened to meet there.

There are many examples.

#small world stories

Let's establish a culture of personal data protection together

#makeahabit personal data protection

What happens at work stays at work

- With this slogan, we remind all data controllers (the person who collects other people's personal data for professional purposes) that the use of data for personal purposes when it was obtained for professional purposes is not allowed, even if you think you have a lot of reasons to do so, for example:

• If you think that you have found the love of your life and it is not a big crime to write to him/her for personal purposes on the mobile phone number obtained in the service;
• Or if you take into account a seemingly harmless request of a relative and share with him/her information on another person obtained in the service;
• Maybe you're excited that you've provided a service to your favorite celebrity and you want everyone to know about it.....
• ……There are many examples..

Remember that Georgia is one of the countries in the world where personal data protection legislation applies and it applies equally to both public and private institutions. The law imposes a number of obligations on data controllers, in case of violation of which specific sanctions, including a fine, are provided.

Let's establish a culture of personal data protection together!

#makeahabit personal data protection

Documents left unattended will not be carried away only by the wind...

If you are a data controller, a person who obtains the personal data of other people for professional purposes, then the law obliges you to properly protect this data from people who do not have the right to access it.

Think about it, do you pay enough attention to the security of these documents?

Are the electronic tools in which you store this data properly secured?

Or are the folders where this data is stored in material form located in a safe, secure, inaccessible place?

When issuing/disposing of useless documents, do you take care to damage them so much that they are no longer readable by an unauthorized person?

For example, in the practice of the Service, we remember cases when a citizen bought bread wrapped in documents containing personal information.

And also, documents containing important data, left unattended in the car by the employees of one of the companies, were indeed blown away by the wind and ended up in the hands of unauthorized recipients...

Let's establish a culture of personal data protection together

#protectpersonaldata

#makeahabit personal data protection

This is the ABC in the field of personal data protection!

If you are a data controller, i.e. a person who obtains other people's personal data for professional purposes, then the law requires you to obtain and use this data in a lawful manner. Personal data processing is the taking of photos/videos of guests at an organized event and the use of underlined material for various purposes by the organization/company. Verbal or written consent must be obtained prior to publishing this type of information.

• For instance, in the practice of the Service, we had a case when the doctor, after the plastic surgery, published the patient’s before and after surgery photos, without permission, on the social network.
• Also, the photographer posted and stored the photos taken at the wedding on his personal website without the permission of the couple.

There are many examples…

How to avoid the violation of the law?

• When taking a photo/video, provide the audience or a natural person with information about the purpose of shooting and its further use;
• In order to obtain permission, add a column of consent to photo/video shooting in the registration forms;
• When taking/disclosing photos/videos of minors, obtain permission from the parent or legal representative.

Remember that even with prior consent, a person has the right to ask you to delete their photo, video, or audio material, blur their face, etc. You must fulfill this request.

Let's establish a culture of personal data protection together

#obtainaconsent

#makeahabit personal data protection

If you are a data controller, i.e. a person who obtains other people's personal data for professional purposes, then remember that the more obtained data – the more protection is needed, and the purpose for which you request specific data –justification.

• They asked me for my mobile number to buy the item…
• The employer asked me for personal information about my family and relatives…
• I can't register without a personal number...
• They ask me for my biometric data to enter the office...
• The company took a full photocopy of my Identity Card…

If you are a data subject, i.e. a person whose data is processed, remember that a request for information when purchasing a specific item or providing a service does not mean a violation. If you are asked for such data, which at first glance is not related to your request, you must ask why? This information is being asked for a reason. With the received argument, you will be able to determine how legitimate or illegitimate the mentioned request is, and based on that, share the data, or contact the personal data protection service.

Let's establish a culture of personal data protection together

#makeahabit personal data protection