Introduction: Purpose and Scope
These Principles set out a basic framework for the processing of “personal data”, which is defined as information relating to an identified or identifiable natural person (“data subject”), by or on behalf of the United Nations System Organizations in carrying out their mandated activities.
These Principles aim to:
- Harmonize standards for the protection of personal data across the United Nations System Organizations;
- Facilitate the accountable processing of personal data for the purposes of implementing the mandates of the United Nations System Organizations; and
- Ensure respect for the human rights and fundamental freedoms of individuals, in particular the right to privacy.
Scope: These Principles apply to personal data, contained in any form, and processed in any manner.
The United Nations System Organizations are encouraged to adhere to these Principles and may issue detailed operational policies and guidelines on the processing of personal data in line with these Principles and each Organization’s mandate.
Personal data should be processed in a non-discriminatory, gender-sensitive manner. Where appropriate, these Principles may also be used as a benchmark for the processing of non-personal data, in a sensitive context that may put certain individuals or groups at risk of harm. Organizations should exercise caution when processing any data pertaining to vulnerable or marginalized individuals and groups, including children.
In adherence with these Principles, the United Nations System Organizations should conduct risk-benefit assessments or equivalent assessments throughout the personal data processing cycle.
Implementation of these Principles is without prejudice to the privileges and immunities of the relevant United Nations System Organizations concerned.
Principles
- Fair and Legitimate Processing: Personal data should be processed in a fair manner, in accordance with the Organization’s mandate and governing instruments and on the basis of: (i) the consent of the data subject; (ii) the best interests of the data subject, consistent with the Organization’s mandate; (iii) any other legal basis identified by the Organization.
- Purpose Specification: Personal data should be processed for specified purposes, consistent with the Organization’s mandate, taking into account the balance of relevant rights, freedoms and interests.
- Proportionality and Necessity: Processing should be relevant, limited and adequate to what is necessary in relation to the specified purposes.
- Retention: Personal data should only be retained for the time necessary for the specified purposes.
- Accuracy: Personal data should be accurate and, where necessary, up to date to fulfill the specified purposes.
- Confidentiality: Personal data should be processed with due regard to confidentiality.
- Security: Appropriate safeguards should be implemented to protect the security of personal data, including against unauthorized or accidental access, damage, loss or other risks.
- Transparency: Processing should be carried out with transparency to data subjects, including providing information about processing and how to request access, rectification, or deletion, as appropriate.
- Transfers: Personal data may be transferred to third parties if appropriate protections are ensured.
- Accountability: Organizations should have adequate policies and mechanisms in place to adhere to these Principles.
Contact Us
If you have any questions or concerns regarding this Privacy Policy, please contact us at:
Email: [email protected]
Website: robsonclassification.com