{"id":7894,"date":"2017-09-08T07:09:02","date_gmt":"2017-09-08T06:09:02","guid":{"rendered":"https:\/\/huris.nl\/?p=7894"},"modified":"2020-12-01T15:03:35","modified_gmt":"2020-12-01T15:03:35","slug":"huris-support-gdpr-english","status":"publish","type":"post","link":"https:\/\/huris.nl\/en\/huris-support-gdpr-english\/","title":{"rendered":"HuRis Support about the GDPR"},"content":{"rendered":"

–Klik hier voor Nederlands<\/a>–<\/p>\n

Welcome to the newsletter from HuRis Support about the new European General Data Protection Regulation, the GDPR. The goal of the regulation is to protect and empower all EU citizens data privacy and to reshape the way organizations approach data privacy.
\nThe new regulation will have impact on all European businesses and businesses all over the world who process personal data for European citizens. The GDPR will be applied on the 25th of May 2018.<\/p>\n

GDPR is all about accountability regarding personal data handling and being able to demonstrate how you handle it. SAP has been developing tools to support your organisation to be compliant to the GDPR including Human Resources tools. Note that these tools are only a part of the actions your organisation should be working on.<\/p>\n

Although legislation and jurisprudence is needed to fully define the needed actions and processes for organisations, the main elements of the GDPR provide a good guidance to make a start.<\/p>\n

Personal data protection by design<\/strong>
\nPersonal data protection by design is essential in the GDPR. Personal data protection safeguards and privacy-friendly default settings have to be the norm.
\nStoring or processing personal data should be legitimate, if not, the personal data must be deleted or fully anonymised. This is about protecting the privacy of individuals, it will not involve erasing past events or restricting freedom of the press.
\nAccountability<\/strong>
\nOrganisations need to be able to show that they are compliant to the GDPR. They need to know which personal data they are storing, for what purpose and how they protect it. The personal data accountability includes storing a minimum of personal data only when needed, correction of wrong personal data, security of personal data to prevent loss or unauthorized access.
\nConsent by person<\/strong>
\nConsent for the handling of personal data must be specific, clear and provided without costs to a person. For example, consent is needed for storing a resume, longer than the vacancy an applicant applied for.
\nControl by person<\/strong>
\nA person can request insight in his or her personal data. Organisation should be able to provide a copy and correct or delete personal data when requested, if there is no legitimate ground for retaining it.<\/p>\n

HR system tooling for GDPR compliancy<\/strong>
\nSAP has checked their current functionality to the new demands from GDPR. Next to existing reporting, auditing, security, authorisation functionality, some new functionality has been or will be added. SAP provides HR-tools for implementing GDPR in your HR system.<\/p>\n

SAP HCM<\/strong>
\nTo be compliant to the new rules SAP has developed new tooling and functionality. This functionality is already available in up-to-date HCM systems.<\/p>\n