Читать книгу Privacy & Data Protection Practitioner Courseware - English - European Institute of Management and Finance (EIMF) - Страница 23

1. Describe and analyze the roles of the different stakeholders involved as controllers, processors or data subjects in the newly merged hospital organization:

• responsible medical departments, like radiology and surgery

• main datacenter

• back-up data center

• the companies servicing the data centers

• hospital pharmacy

• staff, like financial administration and human resources

• patients at home and in retirement centers etcetera

2. Set up a high level mapping for the data flows of the personal data processed between the above mentioned parties in the newly merged hospital organization.

3. Describe the possible risks for personal data due to the merger and the responsibilities and challenges you face as a DPO during the merger