Development of the data protection function
Heilala, Alisa (2023)
2023
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2023060217415
https://urn.fi/URN:NBN:fi:amk-2023060217415
Tiivistelmä
The objective of this thesis was to develop the data protection function in organization X. The main goal for developing the data protection function was to create working instructions for the Privacy Officer’s responsibility areas. In addition to the instructions, the objective was to develop one’s own professional competences. The organization operates in the financial sector internationally. However, the working instructions was made for the Privacy Officer’s in Finland.
The knowledge base for the thesis was mainly based on the General Data Protection Regulation. In addition to the EU legislation, the information was be gathered from the House of the Data Protection Ombudsman’s website. The data protection supervisory authority has collected the most relevant information based on the General Data Protection Regulation on their website which is accessible to all. Therefore, that was seen as an important source for this thesis.
The key outcome of the thesis was the working instructions for the Privacy Officer’s responsibility areas. Additionally, professional development increased rapidly during the thesis period since making the instructions required comprehensive familiarization about each of the Privacy Officer’s responsibility areas. The instructions were made by writing a process description, followed by step-by-step instructions for the Privacy Officer’s work tasks.
The knowledge base for the thesis was mainly based on the General Data Protection Regulation. In addition to the EU legislation, the information was be gathered from the House of the Data Protection Ombudsman’s website. The data protection supervisory authority has collected the most relevant information based on the General Data Protection Regulation on their website which is accessible to all. Therefore, that was seen as an important source for this thesis.
The key outcome of the thesis was the working instructions for the Privacy Officer’s responsibility areas. Additionally, professional development increased rapidly during the thesis period since making the instructions required comprehensive familiarization about each of the Privacy Officer’s responsibility areas. The instructions were made by writing a process description, followed by step-by-step instructions for the Privacy Officer’s work tasks.