DATA PROTECTION
Italian Data Protection Authority: green light for Code of Conduct for management software vendors.
The Italian Data Protection Authority has given the green light to the Code of Conduct of Assosoftware, the Italian Association of Software Manufacturers in Italy, regarding the processing of personal data carried out by management software development and production (SWH) companies.
Such software, intended for companies, associations, professionals and public administration, is used for the fulfillment of tax and social security, welfare and management obligations, the preparation of financial statements, personnel management and corporate obligations, thus having a significant impact on data protection aspects.
In particular, they enable the automation of internal processes of enterprises related to the management of invoicing, customer relations, while for professionals, the management of accounting, tax, labor, and legal activities.
In view of the sensitive nature of the data processed, the Code aims to define a set of rules and technical and organizational measures so that software produced and made available on the market by Assosoftware member companies is developed in compliance with the principles of data protection from the design stage (by design) and by default (by default).
This is to facilitate compliance with the GDPR and to make available to customers suitable tools to fulfill their data protection obligations with regard to processing carried out through software.
In addition to approving the Code of Conduct, the Authority also accredited the related Monitoring Body, composed of experts in the ICT sector, with particular reference to data protection profiles.
Such software, intended for companies, associations, professionals and public administration, is used for the fulfillment of tax and social security, welfare and management obligations, the preparation of financial statements, personnel management and corporate obligations, thus having a significant impact on data protection aspects.
In particular, they enable the automation of internal processes of enterprises related to the management of invoicing, customer relations, while for professionals, the management of accounting, tax, labor, and legal activities.
In view of the sensitive nature of the data processed, the Code aims to define a set of rules and technical and organizational measures so that software produced and made available on the market by Assosoftware member companies is developed in compliance with the principles of data protection from the design stage (by design) and by default (by default).
This is to facilitate compliance with the GDPR and to make available to customers suitable tools to fulfill their data protection obligations with regard to processing carried out through software.
In addition to approving the Code of Conduct, the Authority also accredited the related Monitoring Body, composed of experts in the ICT sector, with particular reference to data protection profiles.
