A privacy notice to let individuals understand what data is being collected, the legal reasons, retention period, security to protect data and a contact for any questions should have been a starting point for this data collection process.
In the iProov system, as many as 250 discrete data measurements are made of a participant’s face and stored as an encrypted data hash, a string of code, that’s only readable by the company’s software.
Recent data protection laws in the Caribbean have been heavily modeled on the European Union’s General Data Protection Regulations (GDPR).
GDPR wasn’t a perfect project in the EU, but it benefited from existing trade and business harmonisation agreements in that union.
The most aggressive nations working toward the national data protection and privacy policy requirements are Jamaica and Barbados. Both nations advertised for the role of Data Protection/Information Commissioner in December.
The legal challenge by privacy activist Maximillian Schrems forced the court to reconsider the EU-US Privacy Shield law and how it works in practice.
Data security is focused on protecting personal data from any unauthorized third-party access or malicious attacks and exploitation of data.
“People think that cybersecurity is an IT problem, but it’s an organisational risk management issue. It’s at the intersection of privacy and security that we find the protection of personal information.”
