{"id":6068,"date":"2022-01-27T11:38:43","date_gmt":"2022-01-27T10:38:43","guid":{"rendered":"https:\/\/www.esferize.com\/data-protection-day\/"},"modified":"2022-01-27T11:38:43","modified_gmt":"2022-01-27T10:38:43","slug":"data-protection-day","status":"publish","type":"post","link":"https:\/\/www.esferize.com\/en\/data-protection-day\/","title":{"rendered":"Data Protection Day"},"content":{"rendered":"

Since 2006, Data Protection Day<\/strong> or Information Privacy Day<\/strong> has been celebrated every year on January 28th<\/strong>. Specifically, since the Personal Data Protection Act<\/strong> was passed, which aims to ensure and safeguard, in comparison with the processing of personal data, the public freedoms and essential rights of natural persons, and in particular their honour and personal and family privacy.<\/p>\n

However, there is still a great lack of awareness of all the areas that can be covered by this law. One example is free Wi-Fi<\/strong>. Since the GDPR came into force, companies are obliged to comply with a number of privacy and data protection requirements, and therefore to offer secure access to these services.<\/p>\n

What has changed?<\/h3>\n

The end of signs with Wi-Fi and the password in a visible place. And, of course, weak encryption (WEP). These behaviours expose your users’ security to cybercriminals. In addition, you may face an administrative sanction if a crime is committed from your business network.<\/p>\n

What obligations do you have?<\/h3>\n

The login portal should include the following information<\/strong>: who is the data controller, why and for what purpose personal data are collected and how to exercise your rights.<\/p>\n

Furthermore, in the event that a breach<\/strong> is detected that jeopardises the information collected, the owner of the user registry must notify the users within 72 hours. In case of failure to do so in a timely manner, the responsible party will face sanctions as determined by the Spanish Data Protection Agency (AEPD).<\/p>\n

Therefore, a section should be included where the user expressly agrees to have read and accepted the privacy policy and the Terms and Conditions of Use<\/strong>.<\/p>\n

You should also collect a log of user activity with the following information:<\/p>\n