The information below is a technical summary and does not constitute legal advice. Privacy protection regulations are complex law. To adapt them to your business, please consult a lawyer specializing in privacy.
Under the law, any collection of data about people managed digitally is considered a database. This includes customer lists, employee records, suppliers, leads, and even security camera footage.
A sole proprietor's business with no employees who have access to the data.
Small databases (up to 10,000 people). Required: user management, physical and backup security.
Sensitive information, or over 10,000 people.
Required: access management and activity logging.
Over 100,000 people, or highly sensitive data.
Required: periodic penetration testing.
Ornet IT's team specializes in rolling out the security solutions required by the regulations (MFA, log management, encryption and backup).
← Contact us for a compliance assessment