objective of the Authority is to maintain an appropriate level for the minimum security measures being proposed, however, meet the needs of businesses, especially small, designed to streamline procedures, the precautions to be graduated depending on the sensitivity of the treatments and contain costs. According
the measure of the Guarantor, special interest groups:
- may give instructions to officers on the minimum measures also orally;
- can use to access the computer systems of any authentication system based on a username and password, the username must be disabled when there is no right of access to data (eg, no longer operates within the organization);
- in the event of prolonged absence or refusal of the employee can put procedures in place or how they will still allow the operation and security of the system (eg. the automatic sending of mail to another delivery accessible);
- need to update security programs (antivirus) at least once a year, and back up data at least once a month.
With the measure, in addition, the Guarantor has provided to small and medium-sized enterprises, artisans, professionals, public and private entities who process data only for administration and accounting, some guidelines for the preparation of a programmatic document for the simplified security.
Simplified procedures have been suggested for those who processes data without the use of computer systems.
Along with the minimum safety measures, the Guarantor has also adopted a measure that simplifies the model used to perform notifications, namely the statements by the Authority to do when you start a treatment of particular types of data (genetic, biometrics, artificial insemination, etc.)..