Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Logs and data protection in europe

  • 27-07-2012 8:14pm
    #1
    Registered Users, Registered Users 2 Posts: 1,165 ✭✭✭


    Evening all,

    Starting this thread here, mods please feel free to move if necessary.


    Question for security people

    Working with a well known SIEM for network security monitoring.
    Logs and events stored for 6 months in some cases.

    Is there any breach of eu/Irish data protection or privacy in the storage does anyone know?

    No PII but you could identify a user's activity within the system & so it could be used in the event of an internal investigation.


    Thanks all


Comments

  • Closed Accounts Posts: 2,948 ✭✭✭gizmo555


    The general principle is that you must not retain personal data for longer than is necessary to fulfil the original purpose(s) for which it was collected.

    In addition to this, you may retain personal data for longer if you are under a legal obligation to do so. For example, an employer is legally required to retain records of staff working time and leave for three years.

    As you allude to, personal data need not necessarily directly identify the data subject - if the subject can be identified from the data in conjunction with other information that is in or likely to come into your posession, that's also covered by data protection law.


Advertisement