Decree-Law No 112/2008 of the Guarantor and the decision of 27 November 2008 have reduced the privacy requirements for SMEs and professionals.
objective of the Authority is to maintain an appropriate level for the minimum security measures being proposed, however, meet the needs of businesses, especially small, designed to streamline procedures, the precautions to be graduated depending on the sensitivity of the treatments and contain costs. According
the measure of the Guarantor, special interest groups:
- may give instructions to officers on the minimum measures also orally;
- can use to access the computer systems of any authentication system based on a username and password, the username must be disabled when there is no right of access to data (eg, no longer operates within the organization);
- in the event of prolonged absence or refusal of the employee can put procedures in place or how they will still allow the operation and security of the system (eg. the automatic sending of mail to another delivery accessible);
- need to update security programs (antivirus) at least once a year, and back up data at least once a month.
With the measure, in addition, the Guarantor has provided to small and medium-sized enterprises, artisans, professionals, public and private entities who process data only for administration and accounting, some guidelines for the preparation of a programmatic document for the simplified security.
Simplified procedures have been suggested for those who processes data without the use of computer systems.
Along with the minimum safety measures, the Guarantor has also adopted a measure that simplifies the model used to perform notifications, namely the statements by the Authority to do when you start a treatment of particular types of data (genetic, biometrics, artificial insemination, etc.)..
The measure on safety measures is immediately applicable without any representations or communications to the Guarantor, while that on the service will be operational within 60 days after publication in the Official and will not involve the obligation to notify of new or amended notifications against who has already done so.
