PersonalDataDestructionAnonymizationAndEncryptionGuideline · Table (p.10)
From PersonalDataDestructionAnonymizationAndEncryptionGuideline.pdf · page 10
| 0 | 1 | 2 | 3 |
|---|---|---|---|
| C) Data Encryption: The process of transforming personal data into a secure | |||
| code using robust cryptographic algorithms. Cryptographic keys must be | |||
| stored securely and separately from the encrypted data. | |||
| D) Data Masking: The application of data masking techniques to conceal or | |||
| obscure specific data elements. | |||
| Fourth: General Guidelines | |||
| 1- All activities | involving data anonymization, | destruction, and | |
| Pseudonymisation shall be conducted in compliance with the Personal Data | |||
| Protection Law, | its Implementing Regulations, | and any applicable | |
| regulatory requirements issued by relevant competent authorities. | |||
| 2- All employees involved in data security shall be adequately trained on the | |||
| importance of secure data Pseudonymisation and anonymization. | |||
| 3- The Controller shall ensure that no personal data is lost, misplaced, or | |||
| disclosed to any | unauthorized third party | during the destruction, | |
| anonymization, or Pseudonymisation process. | |||
| 4- All printed documents shall be disposed of in a manner that renders the | |||
| personal data | irretrievable (e.g., shredding using | secure shredding | |
| machines and disposing of the waste securely) in accordance with the | |||
| regulatory requirements issued by relevant competent authorities. | |||
| 5- Detailed | records shall be maintained of all data anonymization and | ||
| destruction activities, including the techniques used, the justification for | |||
| their selection, and ensuring that such records are available upon request | |||
| from the competent authority. | |||
| 6- The Controller shall regularly review and update its data anonymization, | |||
| destruction, and Pseudonymisation techniques to address emerging risks | |||
| and technological advancements. | |||
| Document | Classification: Public | 10 |
Source Metadata