{"id":9836,"date":"2024-11-04T08:12:42","date_gmt":"2024-11-04T06:12:42","guid":{"rendered":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/?p=9836"},"modified":"2024-11-04T10:08:15","modified_gmt":"2024-11-04T08:08:15","slug":"keeping-our-peoples-personal-data-safe","status":"publish","type":"post","link":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/2024\/11\/04\/keeping-our-peoples-personal-data-safe\/","title":{"rendered":"Keeping Our People\u2019s Personal Data Safe"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Keeping Our People\u2019s Personal Data Safe<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Extra precautions you need to be aware of.<\/strong>
Each day at work, we all strive to live Anglo American\u2019s values, including treating people with care and respect. We apply the same care to our colleagues\u2019 personal data, which should always be handled responsibly and treated with respect.<\/p>

How IM helps to protect sensitive personal information<\/strong>
The IM data protection team does this by using tools to scan and audit our document storage platforms, like OneDrive, SharePoint and Box, to identify sensitive personal information in files that may have been shared too broadly (organisation-wide or publicly). And subsequently, the identified file\u2019s permissions are changed to limit the number of people who can access the file.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Examples of overshared sensitive information<\/strong>
When a health record is copied to a folder that the entire organisation can access.
Instead share with intent \u2013 only when required and with people who have a valid reason to see it (authorised parties).<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Sharing a credit card statement through an anonymous Box link.
Generate a Box link that can only be accessed by specified people \u2013 people you choose \u2013 as well as a password.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Sharing a spreadsheet of contact details that anyone can access, including external users.
Password protect the file, and restrict access to people who have a valid reason to access the information \u2013 both internal colleagues and external users.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

So, how does this affect you?<\/strong>
Well, it shouldn\u2019t. All you need to know is that you can continue to work as usual, knowing these safeguards are already in place.<\/p>

But, if you\u2019ve shared sensitive personal information too widely, you should expect the file\u2019s permissions to be changed to restrict access and protect the contents. (So when you get a request to access a file you\u2019ve previously shared, this could be why…) This will not stop you from accessing your file or sharing it with specific people who have a valid reason to access it.<\/p>

What if I have a valid reason to share sensitive personal information with the entire organisation?<\/strong>
Please log a Request to share sensitive data via the IT self-service portal<\/a>.<\/p>

How do I share sensitive information responsibly?<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

More information<\/strong>
More guidance is available on the Data Protection Eureka page<\/a>, including information about handling personal data, and the latest policies, procedures, and guidelines. And you can learn how to better protect our colleagues’ personal data by Labelling (classifying) your data (sharepoint.com)<\/a>.<\/p>

Supporting material<\/strong>
What is sensitive information?
\u2022 Video<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Important data privacy policies, procedures and guidelines<\/strong>
Our Group Data Privacy Policy<\/a> explains the rules for handling personal data at Anglo American, aiming to raise awareness of privacy laws and set the standards we must follow.<\/p>

Our Group Privacy Review Procedure<\/a> ensures that any new or changed personal data project is reviewed to comply with our Data Privacy Policy and relevant privacy laws.<\/p>

Our Group Data Retention Procedure<\/a> requires that personal data is kept only as long as necessary. Once no longer needed, it must be disposed of or anonymised to protect individuals\u2019 privacy.<\/p>

Our Personal Data Retention Guidelines<\/a> explain how Data Stewards and Process Owners should follow the Group Personal Data Retention Procedure and Group Data Policy to manage personal data retention and disposal and our Group Personal Data Retention Schedule<\/a> lists recommended data retention periods for various business areas. Data Owners and Stewards should use it to follow retention and disposal rules, based on legal requirements, business needs, or industry standards.<\/p>

Our Global IM Security Information classification standard<\/a> explains the legal obligations we have as an organisation, and colleagues, to protect certain information as required by regulators in the countries we operate.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Each day at work, we all strive to live Anglo American\u2019s values, including treating people with care and respect<\/p>\n","protected":false},"author":1,"featured_media":9838,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[121],"class_list":["post-9836","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-lifeoxfordcampus-04-november-2024"],"_links":{"self":[{"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/posts\/9836","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/comments?post=9836"}],"version-history":[{"count":7,"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/posts\/9836\/revisions"}],"predecessor-version":[{"id":9861,"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/posts\/9836\/revisions\/9861"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/media\/9838"}],"wp:attachment":[{"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/media?parent=9836"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/categories?post=9836"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev.move-me.co.za\/life-at-oxfordcampus\/wp-json\/wp\/v2\/tags?post=9836"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}