# data[].attributes.body
Det er data som gør at man kan identificere eller vide hvem personen er ud fra disse oplysninger

Det kan f.eks. være
CPR-nummer
Adresse
sygdomshistorie
Køn og alder

m.m

# data[].attributes.attachment_link.readable_text
For at svare på, hvad persondata egentlig er, skal vi starte med at have fat i EU's definition fra Persondataforordningen (GDPR):

" Enhver information, der kan relateres til en identificeret person, eller data der direkte eller indirekte kan identificere en person ".

Eller med andre ord er persondata: Al information, der kan identificere en bestemt person.

Selv hvis et navn eller en adresse er erstattet af en kode, vil der stadigvæk være tale om en personoplysning. Så længe det kan føres tilbage til den oprindelige individuelle personoplysning.

I Danmark skelner man typisk mellem tre kategorier af persondata:

Almindelige persondata (f.eks. navn, adresse og e-mail)

Fortrolige persondata (f.eks. cpr-nummer, økonomiske forhold og billeder)

Følsomme persondata (f.eks. race/etnicitet, straffeattest og biometriske oplysninger)

Virksomheder skal beskytte persondata

Loven stiller krav om, at virksomheder beskytter alle interne og eksterne personoplysninger med tilstrækkelige sikkerhedsforanstaltninger.

Hvilke konkrete foranstaltninger er det dog op til den enkelte virksomhed at vurdere.

Typisk handler det om, at man skal sikre sig både teknisk (f.eks. med firewalls, opdateringer og it-infrastruktur) og organisatorisk (f.eks. med opdatering af adgangstillladelser, sikkerhedskurser og beskrevene procedurer).

Kryptering er også vigtig at forholde sig til. Datatilsynet anbefaler helt generelt kryptering, når man sender personoplysninger , personnumre og passwords via hjemmesider eller e-mail.

Dog stiller de utrykkeligt krav om kryptering, hvis man overfører følsomme oplysninger eller personnumre via hjemmesider.

Vær opmærksom på medarbejdernes persondata

Går man ind på en virksomheds hjemmeside, vil man ofte kunne finde navne og billeder på virksomhedens forskellige medarbejdere. Det er sandsynligvis helt i orden.

Virksomhederne må gerne oplyse om medarbejdernes navn, arbejdsområde, direkte telefonnummer og andre arbejdsrelaterede oplysninger på deres hjemmeside og intranet.

Det anses nemlig som en naturlig del af informationen om virksomheden, og derfor behøver virksomhederne ikke at få et samtykke fra medarbejderen.

Til gengæld må virksomheden kun offentliggøre persondata som f.eks. billeder af medarbejderen og privatnummer, hvis den ansatte aktivt har sagt ja til det.

Ønsker man f.eks. at offentliggøre medarbejderbilleder, er derfor ikke nok bare at skrive til medarbejderen. Og hvis han/hun ikke protesterer inden for f.eks. en uge, så må man ikke se det som et samtykke fra den ansatte.

Virksomheden skal nemlig kunne dokumentere, at medarbejderen aktivt har sagt ja.

Der skal være mulighed for indsigt og sletning af persondata

Både medarbejdere og privatpersoner har ifølge Persondataforordningen til hver en tid krav på at få oplyst, hvilke data virksomheden har registreret om den pågældende person.

Virksomhederne skal altså kunne oplyse, hvilke oplysninger der ligger om den enkelte person, formålet med at disse data er indamlet, kategorierne af modtagere af oplysningerne (er det f.eks. kundeservice eller marketingafdelingen, der har adgang til disse data?) og fortælle, hvor oplysningerne kommer fra.

Læs mere om persondataforordningen (GDPR) på Datatilsynets hjemmeside.

Eksempler på persondata

Eksempler på personfølsomme data

Hvis du vil vide mere

Du kan altid få hjælp og finde svar på vores temaside om persondataforordningen eller deltage i en af vores arrangementer om emnet.

Er du generelt interesseret Etik, Privacy og sikkerhed, skal du måske være med i IT-Branchens it-sikkerhedsudvalg. Kontakt Martin Jensen Buch, hvis du vil høre mere om, hvad udvalget laver.

# data[].attributes.attachment_link.title
Hvad er persondata egentligt? - IT-Branchen

# data[].attributes.attachment_link.description
Hvad er persondata egentligt? Læs IT-Branchens guide til forståelse af persondata, forordningen (GDPR) og find databehandleraftale for it-virksomheder.

# data[].attributes.headline
Du har kendskab til, hvilke regler der gælder om opbevaring og print af personfølsomme oplysninger - C

# data[].attributes.subject
Du har kendskab til, hvilke regler der gælder om opbevaring og print af personfølsomme oplysninger - C

# data[].attributes.body
Reglerne for sikker opbevaring af personoplysninger er principielt de samme for digitalt og fysisk materiale. Dvs. at kun betroede personer med et sagligt behov skal have adgang til personoplysningerne. Det fysiske materiale med personoplysninger skal opbevares aflåst, når det ikke bruges, og må kun være tilgængeligt for betroede personer. De fysiske materiale skal destrueres forsvarligt, når formålet med opbevaringen ophører.

Personfølsomme oplysninger på papir, skal, ifølge Persondataloven, opbevares aflåst, når de ikke er i brug

Det fysiske materiale må kun være tilgængeligt for betroede personer

# data[].attributes.attachment_link.readable_text
A shredder is a machine or equipment used for shredding. Shredding systems are used to reduce the size of a given material. While most online dictionaries define the shredder as "a device used for shredding documents as a security measure to prevent identity theft," shredders can be of many types based on the material being processed.

There are shredders designed to support material reduction across a range of recycling applications, including plastic recycling, scrap metal, e-waste recycling, wood recycling, and tire-shredding or recycling.

The shredding process produces raw material to be re-introduced into manufacturing, as well as finished products such as ​landscape mulch. Various terminology is used to describe size reduction equipment, including grinders, chippers, granulators and hammer mills. Overall, their main function is to reduce the size of a given material.

The Consumer Shredder vs. Industrial Shredder

Based on the purpose of use, shredders can be categorized as consumer shredders and industrial shredders. Thus, a paper shredder normally falls into the category of consumer shredder as it is mostly used by consumers.

Industrial shredders are typically heavy-duty and high volume systems used to process such recycling material streams as e-waste, plastic, wood, and paper. Industrial shredders are equipped with different kinds of cutting systems such as vertical shaft design, horizontal shaft design, single shaft, two-shaft, three-shaft, and four-shaft cutting systems.

The Use of the Shredder in Waste Management

In waste management, industrial shredders for waste products play a very crucial role. The benefits of using mega-shredders in large-scale waste disposal systems recycling centers and municipal landfills are related to material reduction. Asphalt, rubber, wood, plastics and similar materials can be quickly condensed to a mere fraction of their original size. Also of note, the bio-degradable waste decomposes faster when shredded. If properly shredded, the materials that are buried in landfills take much less space.

The Use of Shredders in Recycling

In today's economic environment, communities and businesses are always looking for new ways of cutting costs and the use of shredders provides new strategic options. There are two main purposes of shredding materials in the paper recycling process.

Firstly, by reducing the volume of material through reduction, transportation and storage costs may be decreased. Secondly, automated shredders, particularly in e-waste recycling, also liberate materials for recycling. Such equipment is offered by several vendors. Many options are available, depending upon the specific application. Before making an investment, potential buyers should understand such factors as:

The assortment of items to be recycled

Volume of throughput

Requirements of residual buyers in terms of such parameters as particle size

A flat incline belt is often used to feed materials into the shredder. The material can be placed on the belt through a variety of methods, depending on the particular operation. Material handling equipment assigned to perform this task can include grappling devices, front-end loaders, forklifts, and drop-bottom containers.

Shredding solutions of choice typically involve low speed, high torque units that slowly tear material apart, minimizing problems such as embedding metal in plastic during the shredding process.

Where large items are to be shredded versus a stream of only smaller items, a larger primary breakdown unit may be required. A second pass can be then made with a secondary shredder or granulator to further reduce particle size and facilitate the liberation of recyclable materials. Sizing screens are utilized to ensure a uniformly sized product.

Some vendors offer a single pass machine that will do both the primary breakdown and particle reduction. A variety of sorting machines can be used to sort material for maximum recovery.

# data[].attributes.attachment_link.title
The Definition of Shredders in Recycling and Waste Management

# data[].attributes.attachment_link.description
Electronics shredders are used for recycling a variety of materials, including e-waste. Learn more about their various uses in waste management.

# data[].attributes.headline
Du kan forholde dig til, hvordan du som fagperson har ansvaret for at overholde reglerne om behandling af personfølsomme oplysninger. Mie

# data[].attributes.subject
Du kan forholde dig til, hvordan du som fagperson har ansvaret for at overholde reglerne om behandling af personfølsomme oplysninger. Mie

# data[].attributes.body
Tavshedspligt;
Personfølsomme data
Alle oplysninger der kan tilknyttes personen
Konkrete situationer og scenarier som kan lede til identifikation

Opbevaring af data

Sikring af data og IT-midler

Kun behandle oplysninger på arbejde, i arbejdstid og på godkendte IT-midler

Når vi behandler personoplysninger, skal oplysningerne være tilstrækkelige, relevante og begrænsede til det saglige og legitime formål. Vi skal kun behandle personoplysninger der er 'need to know' og ikke 'nice to know'

# data[].attributes.attachment_link.readable_text
By 2025, total global data storage will likely reach 200 zettabytes (one zettabyte = one trillion gigabytes!). And 90% of the population over age six - that's 7.5 billion people - will be generating data online by 2030.

While the convenience of our hyper-connected lifestyle is indisputable, it comes with significant risks, like identity theft and financial loss. Fortunately, the field of cybersecurity has evolved to protect networks, systems, data, devices, and programs from criminal use and digital attacks.

Ready to learn more about what cybersecurity is and how to get into this fast-growing field? Here's what you need to know.

Cybersecurity Definition

"The means by which you protect (secure) the confidentiality, integrity, and availability of your people, processes, technologies, and data is cybersecurity," explains Jackie Flores-Bochner, director of information security and risk management at Johnson & Johnson and Forage program consultant.

Cybersecurity began in the 1970s with the creation of the first antivirus program (Reaper) that chased down and destroyed the first computer worm (Creeper). Since then, it's grown into a trillion-dollar industry that's becoming increasingly crucial every day.

>>MORE: Mastercard Cybersecurity Virtual Experience Program

Why Is Cybersecurity Important?

With well over 800,000 cybercrime complaints - and nearly $7 billion in losses - reported to the FBI in 2021, cybersecurity is a must-have for today's businesses and consumers. And considering that only an estimated 10% of cybercrimes are even reported, the potential impacts on companies and individuals are astronomical.

"The digital era has revolutionized the way we do business, but with that we've introduced new types of risk, including cybersecurity," says Flores-Bochner.

And the number of crimes and losses will keep increasing over the years. According to Cisco's 2022 Cybersecurity Almanac, cybercrime costs will likely reach $10.5 trillion worldwide in 2025, more than three times the cost in 2015.

"If we want to continue pushing the envelope and developing newer, faster, and more efficient ways of working through the use of technology, we need to be mindful of how we are going to secure ourselves while we do that," Flores-Bochner notes. "A business can invest significant time and resources into new processes and technologies but if they don't build in security from the beginning then the repercussions down the road can be costly."

Fortunately, companies are allocating the necessary resources to cybersecurity. In fact, 50% of large companies with more than 10,000 employees spent at least $1 million on cybersecurity in 2021. And some spend much more. For example, JPMorgan spends $600 million per year just on cybersecurity to protect its clients' sensitive information.

>>MORE: JPMorgan Chase & Co. Cybersecurity Virtual Experience Program

Types of Cybersecurity

Although cybersecurity can take many forms, there are several main categories:

Application security: This is the process of keeping applications secure by developing, deploying, and testing security features in software.

Critical infrastructure security: This aims to limit critical infrastructure vulnerabilities related to servers, data centers, network communications, and IT centers.

End-user behavior: Providing education and cybersecurity training to end-users on device security, phishing scams, and other potential threats can prevent cyberattacks.

Information security: Also called InfoSec, information security is the tools and processes used to protect sensitive business information and data from disruption, destruction, and modification.

Internet of Things (IoT) security: IoT security aims to prevent cyberattacks that target network-connected physical IoT devices - anything with a sensor that can transmit data over the Internet. There will likely be around 75 billion IoT devices by 2025, up from 31 billion in 2020.

Network security: This type of security protects computer networks from malware and other cyber threats.

Ideally, businesses should develop an overall security strategy that takes into account all the different aspects of cybersecurity and types of threats.

>>MORE: SAP Cybersecurity Virtual Internship Program

Types of Cybersecurity Threats

The goal of a cyberattack is usually to access or destroy sensitive information, extort money, or disrupt business processes.

"The challenge with cybersecurity is that you can compromise security through almost any means - it's not just hacking a system which is what most people think of," says Flores-Bochner. "You can leak sensitive information to the public or change data to damage the reputation of an organization. You can even bring down a system or hold data for ransom and make it unavailable, which ultimately leads to loss of revenue for some companies."

While there are many types of cyberattacks, these are some of the most common:

Malware: Malware is malicious software created to disrupt and damage a computer. Malware often spreads via downloads or email attachments and includes viruses, spyware, adware, and more.

Phishing: These fraudulent emails appear legitimate and are intended to steal information, like login details and credit card data.

Ransomware: This type of malicious software locks and blocks access to files and data until a ransom is paid.

Social engineering: Attackers use manipulation and lying to get people to give up personal information via phone, text, email, and social media posts. Phishing is a type of social engineering attack.

>>MORE: Telstra Cybersecurity Virtual Experience Program
What Does a Cybersecurity Professional Do?

Because it's such a growing field, the cybersecurity career path includes opportunities for a variety of jobs, such as working as a security engineer. But what precisely do cybersecurity jobs involve?

"At the end of the day, a cybersecurity professional's job is to build and execute processes that will minimize the cybersecurity risk to an organization," says Flores-Bochner. "Whether we are performing penetration tests to see if our company has built an effective and secure environment or if we're developing training and awareness programs for non-technical business leaders - a cybersecurity professional is focused on protecting the company."

>>MORE: AIG Shields Up: Cybersecurity

How to Get Into Cybersecurity

Cybercrimes are on the rise, and as the world's technological capabilities increase, so will the number of attackers trying to take advantage of companies and individuals. Fortunately, that means jobs in this field should be plentiful for many years.

However, It's not always the easiest career to get into. "For the shortage of talent we have in security, you'd think it'd be easier to break into the field," says Flores-Bochner. "Unfortunately, given the complexity of the profession, it is a bit of a challenge to get started."

The good news? With the right combination of education, skills, and experience, you can work your way into a cybersecurity career.

Find your career fit

Discover if this is the right career path for you with a free Forage job simulation.

Education

Because of the need for specialized knowledge, a technology-related major can be enormously helpful, especially if it includes cybersecurity training.

"Degrees in computer science and management information systems tend to be what I see, but with the increasing demand, I'm seeing that more universities are offering cybersecurity-specific degree programs," says Flores-Bochner.

Skills

Hard skills, like IT knowledge, are crucial for cybersecurity careers. In fact, Flores-Bochner says information technology is one of the foundational skills for any cyber professional.

"Almost every cybersecurity professional I know did some time as an IT help desk analyst, network engineer, or something similar," she continues. "Understanding technology and the different layers that could be compromised is incredibly key to be successful as a security professional."

>>MORE: PwC Cybersecurity Virtual Experience Program

Work Experience

While education and skills are essential, work experience can make all the difference when it comes to breaking into cybersecurity.

"Internships are incredibly important," says Flores-Bochner. "Nothing beats hands-on job experience, and the best way to do that is through an internship. It doesn't have to be with a big company either - I often find the best internships are with smaller companies where you get wider exposure to their security teams and strategies."

Flores-Bochner also recommends cybersecurity bootcamps and certifications to gain the skills and experience needed to get into this field.
Image credit: ArtemisDiana / Depositphotos.com
Ready to get the foundational knowledge and skills you need for a cybersecurity career? Check out Forage's tech virtual experience programs.

# data[].attributes.attachment_link.description
Interested in a job helping companies protect sensitive data? Learn all about cybersecurity and how to get into this fast-growing field.

# data[].attributes.headline
Du ved, hvilke handlinger du som fagperson skal foretage dig, hvis personfølsomme oplysninger ikke har været behandlet korrekt. - Jack

# data[].attributes.subject
Du ved, hvilke handlinger du som fagperson skal foretage dig, hvis personfølsomme oplysninger ikke har været behandlet korrekt. - Jack

# data[].attributes.body
Du skal informere nærmeste leder omkring det - de vil oftest kende de konkrete lovgivninger eller vil henvise dig til lovgivningerne

Der skal skrives en UTH - Utilsigtet hændelse

Du skal informere datatilsynet indenfor 72 time vis der er brud på sikkerheden

# data[].attributes.headline
(jack)Hvorfor er det en dårlig idé, at Ida har printet sin køreliste i stedet for at benytte tabletten?

# data[].attributes.subject
(jack)Hvorfor er det en dårlig idé, at Ida har printet sin køreliste i stedet for at benytte tabletten?

# data[].attributes.body
Oplysninger fra listen kan komme i "de forkerte hænder" og kan bruges på dårlige og ulovlige måder

Hun kan miste listen - sværre ved at beskytte

Hun kan ikke se ændringer i køreplanen eller borgerens tilstand

# data[].attributes.headline
(jack) Hvordan burde Ida have forholdt sig - og hvorfor? Kom ind på reglerne for håndtering af følsomme personoplysninger, og forklar dem.

# data[].attributes.subject
(jack) Hvordan burde Ida have forholdt sig - og hvorfor? Kom ind på reglerne for håndtering af følsomme personoplysninger, og forklar dem.

# data[].attributes.body
Have udtrykt for vejleder eller leder at hun ikke er tryg ved at bruge iPadden og der kunne have været lavet en plan for at gøre Ida mere tryg med IT - f.eks et IT kursus

Ifølge lovgivning om personoplysninger og følsomme data må en printet version af disse data kun være tilgængelig under direkte brug og skal ellers være låst inde

# data[].attributes.headline
Hvad skal Ida og hendes vejleder sørge for at gøre nu? Mie

# data[].attributes.subject
Hvad skal Ida og hendes vejleder sørge for at gøre nu? Mie

# data[].attributes.body
Ida og hendes vejleder skal informere nærmeste leder omkring det - Lederen vil oftest kende de konkrete lovgivninger eller vil henvise dig til lovgivningerne

Der skal skrives en UTH - Utilsigtet hændelse

Datatilsynet skal informeres indenfor 72 time hvis der er brud på sikkerheden

# data[].attributes.headline
Hvorfor er det vigtigt, at offentlige myndigheder håndterer lovgivningen korrekt? - C

# data[].attributes.subject
Hvorfor er det vigtigt, at offentlige myndigheder håndterer lovgivningen korrekt? - C

# data[].attributes.body
Fordi de opbevarer og har så følsomme data om forskellige borgere.
Hvis lovgivningen ikke er håndteret korrekt kan der opstå fejl og sikkerheden for borgere kan blive komprimeret

# data[].attributes.headline
Hvordan kan oplysninger på en køreliste bruges i ”de forkerte hænder”? - C

# data[].attributes.subject
Hvordan kan oplysninger på en køreliste bruges i ”de forkerte hænder”? - C

# data[].attributes.body
Man kan kom ud for at folk udgiver sig for at være dig

Folk kan find ud af hvor din borger bor og hvad de heder

Et CPR-nummer i de forkerte hænder kan både bruges til at oprette lån og bestille medicin

Oprette et kreditkort i din borgers navn

Identitets tyveri