The confidentiality agreement and GDPR

The General Data Protection Regulation (GDPR) not only obliges companies to secure IT systems or document processes properly - the human factor is also crucial. Data protection does not start with the firewall, but with the employees. As soon as someone in a company works with personal data - such as customer data, employee information or health data - this person must be obliged to maintain confidentiality. In concrete terms, this means that they must confirm in writing that they have been informed of their obligations under data protection law and undertake not to disclose or use any personal data without authorization.