On the occasion of European Data Protection Day, FCC would like to remind all its professionals of the 10 essential data protection obligations they must comply with to ensure the proper and secure processing of personal data, thereby strengthening the corporate culture of security and privacy, in line with the Spanish Data Protection Agency's efforts to promote this fundamental right.

Our 10 obligations regarding Data Protection

1. Immediately notify the Data Protection Officer (DPO) by email at parmentiam@fcc.es or the Data Protection Coordinator in your business area if you receive or become aware of: A letter, email or phone call referring to: ‘personal data’, ‘rights of access, rectification, erasure, portability and objection’ and/or ‘complaints to the Spanish Data Protection Agency or AEPD’. Security incidents (e.g. loss/theft of equipment or documents containing data, sending information by mistake, viruses, cyber attacks, etc.).
2. Store information on corporate systems, never on your computer or unauthorised external devices.
3. Lock your computer and save your documents when you leave your workstation.
4. Before sending an email, check that the recipient's address is reliable.
5. Use ‘blind carbon copy’ (BCC) when sending information to multiple recipients who are not related to each other. This will protect their personal data.
6. Avoid using paper, do not leave documentation in printers or scanners, and destroy documents using bins and shredders.
7. Do not use personal storage devices for professional information, or disclose information to unidentified users.
8. Take extreme security measures, comply with Information Security Policies and Regulations and with the duty of professional secrecy, even after the employment relationship has ended.
9. Do not share usernames or passwords for information access and management systems.
10. For questions or queries regarding Data Protection, contact the DPO or the Data Protection Coordinator in your business area.