Dublin Paper Shredding – What to Keep and What to Shred

Posted on February 16, 2016 by Security in Shredding

A secure document shredding services are available in the Dublin area. On site paper destruction is available to meet to your shredding needs.

Irish Businesses are required to comply with many levels of legal procedures in order to operate. From protecting personal data such as confidential client and employee details right through to safeguarding sensitive company information in addition to abiding by individual sector regulations. Failure to comply at any level can incur severe criminal and damage a companies reputation.

It may be the end of the annual year or the end of an accounting Year but all Organisation need to go through their archives, office files and offsite storage files to decide upon what is legally required to be kept and what can be passed to go through their paper shredding Dublin service.

The best and most appropriate method for any Organisation to differentiate their material from that that can be shredded vs that that should not be shredded is to separate the material into its respective generation timelines.

When we mention respective generation timelines for sensitive paper we are talking about material that is generated in the following;

Daily generation
Monthly
Yearly
After seven years

Daily generation;

Most Organisations will have some form of paper that is generated on a daily basis. This is one of the highest risk sources of a data breach occurring within an Organisation as staff throughout your Organisation may leave waste paper into general recycling or any other place where fraudulent people may get access to it.

The daily generated material is not required for Organisations to satisfy tax requirements and it is normally not relevant for audit purposes and it is for this reason that daily generated paper should enter your Dublin paper shredding service immediately. Examples of this material would be memos, internal emails and CV’s.

Monthly generation;

On a monthly basis it is advisable for Organisations to reconcile all transactions and clear out any paper that may be building up within temporary storage solutions. One it has been confirmed that all of the documentation is no longer required for tax purposes it is advised that Companies should shred the material through a Dublin document shredding service. Examples of these documents would be Route plans, meeting agendas, performance targets, credit card details and bank transaction documents.

Yearly/Annual generation;

This is the material that is required to be kept for a minimum of one year. Materials such as unsuccessful CV candidates (unless there may be legal action). It is important to at all times be vigilant of what Revenue requires to be kept for tax purposes in addition to what your own business may need in terms of long term expenses and business activities.

Discard after seven years;

In Ireland Companies have a legal requirement to retain certain documents for up to seven years. Once these sensitive documents have reached their seven-year period a Company can choose to have the material destroyed. It is advisable that this task should be an annual task as you will be capable of maximising your accuracy in the destruction process, maximise your success within an audit situation, maximise your storage space, minimise your storage costs and eliminates the detrimental build-up of old documents.

Examples of these documents would be; Invoices, Accounting records, company transactions, tax payments, VAT records.

For further information, relating to document retentions please visit; https://www.revenue.ie/en/business/running/keeping-records-revenue-audit.html and/or visit www.securityinshredding.com/ and our compliance team will help you with your query.

Alternatively Email us at: info@securityinshredding.com

Security in Shredding

Specialising in secure confidential document shredding services with a reputation for exceptional security, customer service. Delivering value for money and the utilisation of leading technology compliant to the highest security standards within the industry.

Minister says Data Protection Commissioner is independent

Posted on February 5, 2016 by Security in Shredding

RTE News 28^th January 2016

The Minister for European Affairs and Data Protection has defended the Office of the Data Protection Commissioner, saying it is completely independent of government.

Minister Dara Murphy was responding to the news that Digital Rights Ireland is to take legal action against the Government, challenging whether the office is truly an independent data authority under EU law.

DRI says a series of judgments from the EU’s top court have stressed the critical importance of a truly independent data protection authority.

However, DRI says it will claim in court that Ireland has failed to properly implement EU data protection law or follow the requirements of the Charter of Fundamental Rights by failing to ensure the Irish ODPC is genuinely independent from government.

Speaking to RTÉ News, Mr Murphy said he was aware of the impending case, but said it would be up to the courts to decide.

He added that the ODPC and its functions are completely independent of government.

He acknowledged that the ODPC is government funded, but said apart from that it is like many other agencies in the state that are independent of government.

Mr Murphy also defended the public sector’s attitude to data protection, following criticism earlier today from Data Protection Commissioner, Helen Dixon.

The minister said improvements in compliance with data protection rules are needed across society including Government departments and the public sector generally.

But he said the new European General Data Protection Regulation will change and strengthen data protection rules.

He added he had recently brought local authorities and semi-state companies together to impress upon them the strong obligations they have in this area.

He said public bodies are engaging, although that doesn’t mean there is not more work to be done in the area.

On the controversy around the Garda Síochána Ombudsman Commission’s accessing of journalists phone records, Mr Murphy said the Minister for Justice was right to commission an investigation into it, as it is absolutely essential that citizens have confidence in any state agency that processes or handles their data.

Commissioner critical of compliance levels

Earlier, Ms Dixon criticised the level of compliance with data protection laws in the public sector.

Ms Dixon released a statement setting out priorities for data protection rights and protocol in 2016 to mark the tenth annual Data Protection Day.

In particular, she has called for improvements to the legislative process to ensure greater deliberation and scrutiny of issues that interfere with the fundamental right to data protection.

The commissioner acknowledged data protection is not an absolute right and in certain circumstances, must yield to other competing rights.

However, she also stated that if a public body is going to interfere with data protection rights, it must generally be provided for by law, be proportionate, necessary and made in the general interest or need to protect others rights.

Ms Dixon concludes that consideration must be given to all of these matters when drafting legislation.

Her pointed comments come as her office prepares to begin an audit of contentious powers used by several public bodies, including An Garda Síochána and GSOC, to access telephone records and other electronic messages.

Security in Shredding

What is the European Commission’s New Data Protection Framework proposal?

Posted on January 8, 2016 by Security in Shredding

The European Commission announced a proposed reform to The European Union’s Data Protection Framework On the 25^th of January 2012. You can read the full press release here.

EU Data Protection

Within the announcement The Commission stated that the current framework – known as the 19995 EU Data Protection Directive is outdated. The main reasons for the framework to be outdated are due to rapid technology change and globalisation. These points are important to consider when deciding upon the best option to securely destroy your sensitive paper data through a confidential paper shredding service. Whether the service will be an onsite paper shredding service or an on-demand offsite paper shredding service it is important to ensure that your paper shredding company is a Data processor. You can see the list of registered Irish data processing firms here.

The new Data Protection framework will be a regulation which means all member states will have to abide by the rules. The rules will go into effect two years after they have been adopted by the member countries which is expected to be in 2018-2019.

Security in Shredding Team.

Security in Shredding

Paper Shredding Dublin

Posted on December 16, 2015 by Security in Shredding

This brief blog article will focus upon the topic of Paper Shredding Dublin and will share some insight into unacceptable high risk practices with some links to helpful guidance websites to help with the decision making when establishing a document shredding protocol and digital data destruction protocol within your Organisation and households in Ireland.

Data Protection and the ethical procedures for the disposal of end of life data is essential for all in today’s ever evolving data world. Hard-Drives, CD’s, Data Cartridges and Paper files are the main methods for experiencing a damaging and painful data breach.

Protecting your Physical Data and in turn your Personal Identity is vital for all today and a data destruction Dublin service is the most suitable and compliant method for Organisations operating in Ireland and us the Irish citizens to assert the protection of our information.

High risk practices;

Following the guidance of other Organisations both in the Private Sector and Public Sector;

With the advances in data reconstruction technology, increasing levels of data crime, extreme forces for lower costs in addition to contradicting and mind boggling information, simply looking at an alternative Organisation (Private &/or Public) to mimic their procedures and practices is not an appropriate method to establish your own data procedures and practices for managing sensitive paper documents. As we in Ireland are a member of The European Union we are subject to European Legislation in addition to Irish Data Protection Legislation. This point also raises the level of risk of data protection when looking at other Organisations as there have been many different views upon the legislation and the application of it in our Country.

During the Thanks Giving period in The US an extremely serious Data Breach occurred where paper documents containing personal information were found dumped in a recycling centre. These documents were traced back to a hospital which may now be in line to face serious fines and penalties. The affected parties were contacting and apologies were given on behalf of the hospital.

In November of 2015 in our own home Country of Ireland we have seen a data breach occur in one of our Hospitals which in turn personal patient records were found in a recycling bin on the street outside the Hospital.

I want to highlight these two examples as it is important to note that the protection of personal data is a global issue and it is not to be underestimated. These examples also highlight that Companies in the Dublin Region that wish to establish a Dublin Paper Shredding Service and look for guidance from Organisations either in the Private or Public Sectors may lead to data breaches which in turn may lead to negligence penalty enforcement’s. Independent research from reputable information sources that has the protection of personal sensitive data as their number one concern is the most appropriate method for establishing your data protection procedures.

2. Allowing you Waste Management firm to manage your end of life personal sensitive data;

This point is of serious concern for all Organisations and citizens of Ireland to ensure the protection of their personal sensitive paper data. This article is not to negatively market waste operating firms as many of them do an amazing and admirable job at protecting our environment, producing waste fuel for export to incinerators, collecting household waste, running recycling centers, separating and segregating waste materials and selling waste commodities to the recycling industry for maximum revenues not to mention the hundreds of people that are employed through waste operators, they truly are appreciated. When it comes to personal sensitive data and the appropriate disposal of that data there are specialist firms within the market that are subject to additional standards, certifications and best practices which may not be the case for many waste operators who do not have confidential shredding as their primary business case. There is also an industry representative body for these professional specialist firms to ensure industry best practices. If you are specialist data destruction firm (Paper Shredding Firm) you are a Data Processor and recognised as a data processor under legislation. When you are a data processor you are subject to additional legislation from both Ireland and Europe and you are accountable for breaches of the legislation. If you are a waste operator managing waste services you may not be recognised as a data processor but as a materials processor. With this point, if a data breach occurs the Data Processor liability under data protection legislation may not be valid and there may not be accountability in the case of your data breach.

3. Empowering staff with the responsibility to destroy your end of life data;

When deciding whether or not to give staff the responsibility of destroying their end of life data or hiring in temporary or work experience staff it is important to take into account the following factors

Have you provided adequate training for staff
Have you included their responsibilities in their employment contracts
Have you received an audit trail for your material
Do you have proof of destruction
Do you have proof of recycling
Have you destroyed the data to the appropriate shred size
Have you completed a cost benefit analysis on the activity
Are staff being taken away from other activities
Have you singed confidentiality agreements
Have you conducted background checks upon staff

The risks when destroying data outweigh the benefits of completing the process in-house. When dealing with risk it is impossible to eliminate the risk however it is possible to minimise the risk levels and with this in mind it is important to look for a professional specialist shredding firms to manage your destruction requirements and ensure compliance to save you from possible data breaches.

If you require any further information to better help equip yourself from experiencing a damaging data breach please do not hesitate to contact the Security in Shredding Team for friendly helpful guidance with no obligations. You may also want to visit the following sites;

Security in Shredding

Keeping you Identity Safe – Paper Shredding Limerick

Posted on December 8, 2015 by Security in Shredding

No matter what your career, your financial standing, association involvements and tolerance for privacy it can be detrimental for you to have your identity stolen. When looking at data privacy and data protection there are lists of methods to ensure your safety for both physical data (paper records) and digital data (Online privacy). Examples of these would be data protection training, secure paper shredding, document shredding, hard-drive destruction, hiring EN 15713 certified vendors, purchasing security software and ensuring effective firewalls are in place to name a few.

We know today that the majority of data breaches and identity theft occurs online as it is easier and more efficient for criminals to source personal information without being detected and leaving a trace. This is a new and ever evolving effort for security providers and legislators to battle with in an attempt to succeed against the online data theft crimes.

However, with that in mind it is time to think about the high levels of data theft crimes that we have experienced for years and continue to experience today through bad guys impersonating their victims in return for financial gain. These crimes have been committed as long as confidential identity documents have existed. Precise and measured management is required on order to truly battle against identity theft from paper documents with the key stone being a paper shredding Limerick system, it is not only limited to The Limerick area, firms from right across the Country need to construct/purchase and implement a confidential paper shredding system to manage waste paper documents.

The hard truth is that all of our identities are linked to paper that in turn require a confidential paper shredding service. Simply having copies of the confidential documents can be all that is needed in order to pose as them. Once you can pose as someone you can claim benefits, raise loans and apply for credit cards. One single document could be worth hundreds of thousands of Euro to the right person with criminal intentions. A Limerick paper shredding service through professional vendors that are registered with the required regulatory body is an essential activity for both business and individuals in today’s economy.

The slowdown in the economy, seen the introduction of financing options from product providers such as car dealerships. This development has increased the risk of a identify theft occurring as it requires specific training for any employee to be able to identify a fraudulent request for financing.

Not all identity theft through paper documents is for money, though. A famous example is actor Wallace Ford, who acquired documents including a passport in the name of his dead friend and lived a fake life for thirty years until his death in 1966.

To battle and protect yourselves from data breaches and receiving fines and penalties hire a paper shredding Limerick vendor who has the expertise and certification that will ensure that you are protected from such breaches occurring.

Never enter waste paper into recycling bins and never allow waste vendors to “manage” your waste paper data in order to maintain confidentiality of your data and protect you and your Company’s image.

Security in Shredding

Security In Shredding sponsors Ballycommon Sponsored Ride 2015 in aid of Nenagh Special Summer Camp

Posted on March 18, 2015 by Security in Shredding

Security in Shredding sponsors Ballycommon Sponsored Ride 2015 in aid of Nenagh Special Summer Camp.

Away from Data Protection and Secure Data Destruction (Paper Shredding, Media Shredding and Secure WEEE Recycling); Ballycommon Sponsored Ride 2015 approached us, Security in Shredding with regard to sponsoring an advert and a cross country jump in aid of Nenagh Special Summer Camp.

Not only did the Company donate to the great cause but the brave staff also raised funds and took part themselves and their horses in the event for the day. See photo below.

The Ballycommon Sponsored Ride 2015 was very well organised and well done to all involved.

Security in Shredding are delighted to have the opportunity to contribute to this very worthy cause – Nenagh Special Summer Camp.

Security in Shredding

Security In Shredding Blog

Security In Shredding Blog

Category Archives: Off Site Shredding

Dublin Paper Shredding – What to Keep and What to Shred

Daily generation;

Monthly generation;

Yearly/Annual generation;

Discard after seven years;

What is the European Commission’s New Data Protection Framework proposal?

Paper Shredding Dublin