Please enable JavaScript.

Coggle requires JavaScript to display documents.

Part 2 - Coggle Diagram

- - - - The collection of personal data will be through a login screen, where users do not have to use their real names for the username, allowing individuals to deal with the application entity anonymously or by pseudonym.
    - - Though the application entity will have access to users' emails (due to the login in function), the organisation will not be sending any marketing emails to individuals.
    - - The application will openly and transparently manage data by informing users that their emails, passwords and usernames will not be sent to any third parties.
    - - The agency will collect emails of the users as it is reasonably necessary for the organisation to store the logins of users
    - - If the user changes their personal email, the application will allow them to change their email for their login, ensuring that personal information is kept up to date
    - - After a user has deleted their account, their information (their email) will be destroyed from the agency's storage. The application will protect personal data through effective physical protection of hardware on which the data is stored, as well as implementing security software.
    - - The application will inform users that their emails are required to make a login in the case they forget their passwords or need to change it.
  - - - Data should be handled based on their required privacy
      - Data should be encrypted with a form of two-factor authentication
      - Ensure file permissions, such as access control lists, are up to date
    - - Ensure employees are knowledgeable about compliance and regulatory requirements
      - Use software that backs-up and can recover data
      - Use access control, checksums, version control and data logs
    - - Use preventative measures such as redundancy, failover and RAID
      - Use network or server monitoring systems
      - Ensure Data Recovery and Business Continuity plan is in place in case of data loss