Data Security Tips for self-employed entrepreneurs and businesses

As part of the implementation of the General Data Protection Regulation, abbreviated GDPR, self-employed entrepreneurs and businesses must take the necessary measures to ensure that the processing of personal data is carried out in a structured, documented and secure manner.

Below are a number of key points to consider in order to achieve efficient data security.

1. Establish an internal privacy/security policy:

  • a so-called “data protection policy”, including a clear action plan for data breaches and access requests
  • organize an annual “disaster” drill and update your policy document

Alis Advocaten advises you on drafting the data protection policy, as well as on drawing up a privacy or cookie policy and compiling your processing register.

2. Manage your “administrator” rights consistently:

  • limit the number of administrators
  • limit access rights wherever possible

3. Ensure timely and smart backups:

  • daily
  • store the backups outside the network, for example by using cloud solutions
  • make sure that a smooth restore is possible
  • set a retention period and adhere to it

4. Make use of “two-factor authentication” (2FA):

  • only grant users access after they have proven their identity in two different ways

5. Encrypt your data:

  • convert your data into an incomprehensible string of characters that is unusable to third parties

Alis Advocaten is happy to assist you with the legal framework for these points of attention; for this purpose, we work together with your network administrator.

Learn more about Adverit Antwerp

This article was contributed by Adverit Antwerp. Visit their website to learn more or discuss your situation with their legal team.

Visit local website (opens in a new tab)