Fraternidad-Muprespa appoints the Data Protection Officer
Fraternidad-Muprespa, a mutual collaborator with Social Security, has appointed the Data Protection delegate, in compliance with the General Data Protection Regulation. This standard, approved in 2016 by the European Parliament and the Council, and which will be fully applicable on May 25, 2018, establishes the need to designate this figure for a wide range of entities.
The appointment of the Data Protection delegate has fallen on Jorge Vidal Sanz, director of the Information Systems and Services Security department of the mutual company Fraternidad-Muprespa. Vidal has developed the last 15 years of his professional career in positions linked to system security, and especially to the implementation of data protection regulations: from the primitive LORTAD (Organic Law for the Regulation of the Automated Processing of Personal Data), through the current LOPD (Organic Law for the Protection of Personal Data) and its Development Regulations. During the last two years, since the approval of the General Data Protection Regulation, it has worked on the adaptation of the Entity's policies, procedures and systems to guarantee compliance with this new European provision, and reach the date of May 25 with the peace of mind of the duties fulfilled.
Fraternidad-Muprespa, as a mutual collaborator with Social Security, maintains specially protected personal data, such as the medical records of the patients treated, and financial benefits for situations of temporary disability and permanent disability. Thus, it has developed a special sensitivity and invested great efforts in seeking maximum compliance with data protection regulations. We highlight the implementation of an Information Security Management System (ISMS) in accordance with the ISO/IEC 27001 standard, whose scope of application is the set of computer systems and applications, including those that manage the most sensitive data. Also noteworthy is the possibility that it enables users of its services to exercise the rights related to their personal data (access, rectification, cancellation and opposition) through telematic channels, and especially through its “ Patient Portal”, thus facilitating the transition to the digital world of all its patients and protected workers.
Jorge Vidal has recently been honored with the CISO AWARDS 2018 award, granted by IDC Research Spain. The award recognizes the effort developed by the Security Department of The appointment as Data Protection Officer has been communicated to the Spanish Data Protection Agency through the recently launched electronic notification system by the Agency itself, which in accordance with the General Data Protection Regulation, maintains the registry of the delegates that all obligated entities designate and communicate.
