Whats the difference between lawfully obtaining personal data and having accountability for obtaining it?
Whats the difference between lawfully obtaining personal data and having accountability for obtaining it?
Introduction
As a data analyst, one of the most important things you can do is ensure that you’re complying with privacy laws and regulations. But what exactly does it mean to be “legally obtaining personal data?” In this article, we’ll look at when you need to get consent for your data collection, who has accountability for obtaining personal data (i.e., employees or contractors), and how to make sure that you know if someone else has obtained it unlawfully—all in an effort to keep your company in compliance with federal law!
Legally Obtaining Personal Data
Legally obtaining personal data is a legal requirement, but it’s not the same as having accountability for obtaining it.
Accountability can be achieved through an available, understandable and fair notice to users that their personal information will be collected, used or disclosed. The notice should give them choices about how you use their information and what choices they might make about allowing your collection of that information (e.g., providing explicit consent or opting out).
Accountability for Obtaining Personal Data
You are accountable for your actions, data and business. You are also accountable for the people who work with you, including management and HR.
You’re accountable to your customers, suppliers and investors as well.
Be accountable for your actions.
If you are in the business of handling personal data, be accountable for your actions. You should be able to prove that you obtained the data legally and responsibly, in a timely manner.
Conclusion
I hope this post has been helpful to you. In summary: Legally Obtaining Personal Data is different than having Accountability for your actions. Simply put, if you are the one who obtained the data, you have responsibility for what they did with it and how they handled it!