3 hours 39 minutes
Welcome to module 3.13 data subjects
do this module. We're going to explore what a data subject is as referenced by regulations.
Of course, I kind of joked that data subjects are people but we're gonna talk about data subjects as referenced, you know, in the regulations and why you'll see the term data subjects often. And we're gonna understand the difference between opt in versus opt out.
So data subjects as I mentioned and I had to laugh because I look at these regulations and it doesn't say people, you know, says data subjects. So anyway, data subjects equals individuals whose personal information is being accessed,
processed, stored or transferred by an organization.
And the term data subject is going to be important as we talk about data subject's access requests and and incidents and things of that nature. So it's important to be aware of the terminology
responsibility to data subjects from an organization's
are from organizations typically include notice of how information is collected and used. High visibility and accessibility to notices. Were submit requests, time in response to requests, whether information is shared with third parties and if so how website monitoring and regulation regulatory body potentially impacted.
opt in versus opt out so often typically seen as proactive action to assume a data subject does not want their information shared storage or collected in any way. Data subjects must agree to have their information process before an action
opt out. Typically as a reactionary option for data subjects and not data subject's privacy center, data subjects can choose to not have their information process after an action. So opt in typically derives from regulations that are highly sensitive towards individuals privacy where opt out are are less restrictive about an individual's privacy. So you may have received an email solicitation after that email, there's an opt out message. If you're in a area that is loosely regulated from a privacy standpoint, that is common to see, you won't see much of those from a heavily regulated
uh industry, you shouldn't or area uh if you're if you're in an opt in there, you would have had to request from an organization to have that information sent to you.
I like this yuri card here. It's easier to ask for forgiveness than to get permission
from Grace Hopper. That's in this regard, especially when it relates to opt in that is not the case, You don't want to be asking for forgiveness, you want to know from a privacy program standpoint. Um you know what you're able to do, And even from an opt out standpoint, you know, there's cannes spam here in the United States, that you have to be very careful about what you send out
uh and solicit from people, even if you're in and out opt out environment, certainly advise you to speak with legal counsel about your options in regard to opt in and opt out
quiz. Question data subjects who live in a region where privacy is highly regulated, most likely have to blank to receive marketing materials.
The answer is opted
during this module. We discussed what a data subject is and why they're important. We also reviewed the difference between opted versus opt out and in. Subsequent modules will discuss data subject specifically in the U. And data subjects in the United States.
MS-500: Microsoft 365 Security Administration
The Microsoft 365 Security Administration (MS-500) training course is designed to prepare students to take ...
7 CEU/CPE Hours Available
Certificate of Completion Offered
Become a CISO
Taught by CISOs for CISOs, this Career Path has developed thousands of executives worldwide. Interact ...