On Februry 17, 2009, a new workplace privacy law took effect in Portugal…
The Assembly of the Republic approved Law 7/2009 on January 21, 2009, and it was published Febuary 12 in the Diário da República, Portugal’s national register, here.
A friend of mine translated this and told me that this means that employers must limit worker surveillance limit use of worker biometric data, and “respect the privacy of employee communications.” This respect means that, quite simplistically, employers may not monitor business network email messages that are “personal.”
Another portion of the law governs use of biometric data, and requires employers to destroy biometric data as soon as an employee has ceased employment.
Tags: awareness and training, Information Security, IT compliance, IT training, policies and procedures, Portugal privacy law, privacy training, risk management, security training