PERSONAL DATA PROCESSING - THE ISSUE OF LOGGING AND MONITORING
PERSONAL DATA PROCESSING - THE ISSUE OF LOGGING AND MONITORING

Summary/Abstract: According to Law on Protection of Personal Data in Bosnia and Herzegovina, the data controller and, within the scope of its competences, the data processor are required take care of data security and shall take all technical and organizational measures and develop rules of procedure required for the enforcement of this Law and other regulations concerning data protection. They also have an obligation to develop the data security plan, which shall specify technical and organizational measures for security of personal data. Pursuant to the bylaw Regulation on the manner of keeping and special measures of technical protection of personal data, the personal data security plan must contain technical and organizational measures that shall ensure, among other things, that it can be verified who processed the personal data: when, which personal data and in which manner – possibility of revision. In this paper, through the presentation of two case studies in the field of health services, we point out the importance of timely addressing the issue of fulfilling the obligation to keep appropriate records on the processing of a special category of personal data - health data.

• Details
• Contents