쉐도잉 연습: What are the 7 principles of GDPR? - 영상으로 영어 말하기 배우기

연습 모드 선택

각 모드는 전체 화면 연습실로 열립니다.

113 문장

문장이 너무 짧거나 길면 Edit를 눌러 조정하세요.

So what are GDPR's seven principles and how do they drive your compliance?

We'll tell you in just a minute per principle.

And you do need to know because breach of the principles leads to the highest fine under GDPR.

4% of your global turnover or 20 million euros or 17.5 million pounds, depending on your GDPR, whichever is higher.

That's the maximum fine.

So stick with us and also for the bonus tip on creating your privacy framework.

Hi, I'm Robert Boar, the founder and CEO of Keepable, the award-winning privacy solution saving you time money

and stress on GDPR giving you great insights for the board

and answers for customers do check us out on keepable.com this

video is part of privacy kitchen free video help on GDPR

and all things privacy if you're new here please do click subscribe

and notify to hear about all of our fantastic new videos as always links are in the notes below

and we'll just use GDPR for both EU and UK GDPRs because they're identical on this point at least for the moment.

That's for another video.

Right, grab a cup of coffee and let's crack on.

Okay, so here are GDPR's seven principles.

They're set out in Article 5 of GDPR.

Now, articles for GDPR is like a section for other laws, so it's like saying Section 5, but let's not go there.

Right, number one, lawful, fair and transparent.

Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Now, unsurprisingly, this is the lawfulness fairness and transparency principle

but the focus has mostly been on lawful

and transparent gives you a very good position on fairness

so people do often call this the lawfulness principle

or transparency principle now lawful includes identifying a legal basis for your processing we've got videos on

that and there have been fines for not identifying one

and for identifying the wrong one like consent legitimate interests etc and obviously this also includes otherwise complying with the law.

Now, transparent includes providing all the information

that GDPR says you've got to give individual data subjects about what you're doing with their personal data.

None of this, again, is new.

Most of GDPR was there before in the directive.

Now, fairness is subjective, but it plays into the reasonable expectations of the individual.

As the UK SEO states, this means you must not process the data in a way that's unduly detrimental, unexpected, or misleading to the individuals concerned.

Right, principle number two, purpose limitation.

You should only collect personal data for specified, explicit and legitimate purposes and not process it in a manner that's incompatible with those purposes.

This is the purpose limitation principle, it makes total sense.

You can't tell people you're only going to process their data to provide, say, software services to them and then suddenly sell them insurance.

The key takeaway here, when you're creating your privacy notices for that transparency principle, make sure you cover the purposes for which you're processing the data.

It's not easy to suddenly start processing for a new purpose if you haven't identified it up front.

There are some exceptions for research and statistics which aren't seen as incompatible

and this is one area the UK is looking at in its new August 2021 onwards review

and we'll see how that goes.

Now number three data minimization.

Personal data that you process must be adequate and relevant

and limited to what's necessary in relation to the purposes for what you're processing.

Data minimization means you don't collect more personal data than is necessary for your stated purpose.

It's actually always been the case as I said before

but GDPR's fines

and increased awareness means it's clear you've got to be focused on only collecting what's necessary

and a good benefit if you're selling this to other team members.

Having less personal data means there's less to protect against breach, less risk and less to search for a data subject request.

Okay accuracy.

Personal data you process must be accurate and kept up to date where necessary.

This is the accuracy principle.

This also includes taking every reasonable step to ensure that any inaccurate personal data for those purposes are erased or rectified, corrected without delay.

So this points to a couple of the data subject rights, the right to rectification or to correct incorrect data, and one aspect of the right to erasure.

Accuracy principles don't normally cause much issue.

Now storage limitation.

This principle says that when you have personal data, you should only keep it in a form which permits identification of the data subjects, as in keep it as personal data,

for no longer than necessary for the purposes for which you're processing it, which you've told in the transparency principle.

This is the storage limitation principle, and again there are some research and stats exemptions.

But when you hear the word retention, this is what it relates to.

Not keeping personal data for any longer than necessary for your specified purposes.

Some retention periods are set out in law, like on tax and maternity, paternity records, for example.

But mostly this is about a commercial decision, what's necessary and relevant for your purpose.

But beware, regulators aren't going to accept infinity because you might use it someday.

It's got to be reasonable.

Now, another benefit as well, because you're having appropriate retention periods, you either delete or anonymize that data at the end,

which means again there's less attack surface for risk and breach

and also less to search when you have a data subject request.

However, retention is the area I believe presents the most difficulty in GDPR compliance programs, and it's not just about GDPR's any privacy.

Okay, security.

Now of course at all times personal data must be secure, and GDPR's security principle requires that personal data is processed in a that ensures appropriate security to personal data,

including against unauthorized or unlawful processing and accidental loss, destruction or damage.

You've got to use appropriate technical and organizational measures for security.

Why they call it integrity and confidentiality principle, I don't know.

They should just say security.

Everyone calls it the security principle.

So security is fundamental to privacy, but it's only one of the seven principles.

Most of GDPR is not about security.

Look at our very polemic ISO 27001 is not GDPR video and see what what we mean.

Now the seventh principle, accountability.

If you're a controller, you're responsible for compliance with the other six principles

and to be able to demonstrate compliance with those other six principles.

This seventh principle is the accountability principle and it's the main change the principles brought in by GDPR.

Now although it's number seven you've got to bake this in from the start.

GDPR enshrined data protection by design and by defaulting to law and brought in various obligations on records.

So this accountability principle means you have privacy governance in place focused on GDPR

and you're able to demonstrate that compliance to regulators, but also to the board, auditors, investors, customers and partners.

And now for our bonus tip.

Fantastic.

If you're looking to create privacy governance to cover more than one jurisdiction, it's a good thing to make it principles based.

And then you can tailor it for each jurisdiction's particularities.

Now, GDPR set the standard globally for data protection, copied to various degrees from California to India, from Brazil, Caribbean and China.

And it's not surprising, the seven principles in GDPR are actually all from the Council of Europe's Convention 108 from 1981.

That was the first legally binding international instrument on data protection.

55 signatures including all the EA, the UK, Turkey, Russia and it contains all of these principles.

Right so there we go.

You now know what the seven principles are of GDPR.

100

You know how they drive your compliance and how they can underpin a global program.

101

Please do look at our other Privacy Kitchen videos.

102

I mentioned the 27001 video.

103

We've got a 27701.

104

What is GDPR?

105

10 steps to GDPR compliance, also very popular.

106

Do visit us at Keepable.com, take a demo, and please do use hashtag Privacy Kitchen to tell us the topics you want us to cover.

107

So stay well in the meantime, and we'll see you soon in Privacy Kitchen.

108

Did this video make the topic easy for you?

109

Well, that's what Keepable software is all about, making GDPR compliance a breeze, instantly creating the insights you need to prove your compliance to the board and customers alike.

110

Why not see for yourself by booking your demo at Keepable.com.

111

And while you're there, we have a whole host of content on our blog, including real-life customer stories, insightful posts, and useful downloads.

112

Hit the link in the video description or visit us at Keepable.com.

113

Looking forward to speaking with you soon.

앱 다운로드

유창하게 말하는 데 필요한 모든 것

AI 발음 평가문장마다 점수 확인

IPA 발음 연습모든 소리 마스터

단어 학습나만의 단어장 만들기

단어 게임놀면서 외우기

QR 스캔

Download on theApp Store Get it onGoogle Play

FOR YOU

이 레슨의 어휘와 말하기 포인트

이 B2 수준 말하기 레슨은 영상 “What are the 7 principles of GDPR?”을(를) 바탕으로 합니다. 가장 자주 반복되는 단어는 다음과 같습니다: principle, Gdpr, personal, privacy, purpose. 이 영상에는 섀도잉할 문장 113개와 단어 1489개가 있습니다. 말하는 구간의 길이는 8:00입니다. 화자는 분당 약 186단어로 빠르게 말하므로 연음과 약하게 발음되는 소리가 많습니다. 영어에서 가장 많이 쓰이는 3,000단어에 속하는 단어가 80%뿐이라 어휘가 어려운 편입니다.

이 영상의 핵심 어휘

영상에서 가장 어려운 단어 15개를 발음, 뜻과 함께 정리했습니다.

단어	발음	뜻
transparent 형용사	/tɹænsˈpæɹənt/	투명하다
incompatible 형용사	/ˌɪŋkəmˈpætɪbəl/	양립할 수 없는
minimization 명사	/ˈmɪn.ɪ.mɪˈzeɪʃən/	최소화
regulator 명사	/ˈɹɛɡ.ju.leɪ.tɚ/	조절기
demo 명사	/ˈdɛm.oʊ/	데모
auditor 명사	/ˈɔːdɪtɚ/	감사역
onward 부사	/ˈɒnwəd/	앞으로
detrimental 형용사	/ˌdɛtɹɪˈmɛntəl/	해로운
tailor 명사	/ˈteɪlɚ/	재단사
erase 동사	/ɪˈɹeɪs/	지우다
hashtag 명사	/ˈhæʃˌtæɡ/	해시태그
directive 명사	/daɪˈɹɛk.tɪv/	지시, 지침
notify 동사	/ˈnoʊtɪfaɪ/	통치하다, 통보하다
turnover 명사	/ˈtɝnoʊvɚ/	영업 이익
subjective 형용사	/səbˈd͡ʒɛktɪv/	주관적

이 영상의 문법

화자가 가장 많이 쓰는 문형을 영상 속 실제 표현과 함께 정리했습니다.

문형	영상 속 표현
수동태 be + 과거분사 — 누가 하는지보다 무슨 일이 일어나는지에 초점	must be processed · aren't seen · are erased
현재완료 have/has + 과거분사 — 과거의 일이 지금도 관련이 있을 때	have been · haven't identified · It's actually always been

주의할 발음

화자는 you're, you've, we'll 같은 축약형과 약화된 형태를 35번 사용합니다. 들리는 대로 짧게 발음하세요.

“sh”와 “zh” 소리: limitation /lɪmɪˈteɪʃən/, retention /ɹɪˈtɛnʃən/, minimization /ˈmɪn.ɪ.mɪˈzeɪʃən/, enshrine /ɪnˈʃɹaɪn/, erasure /ɪˈɹeɪʃɚ/
긴 단어 — 강세 위치에 주의: limitation /lɪmɪˈteɪʃən/, transparency /tɹænsˈpæɹənsi/, accountability /əˌkaʊn.təˈbɪl.ə.ti/, incompatible /ˌɪŋkəmˈpætɪbəl/, minimization /ˈmɪn.ɪ.mɪˈzeɪʃən/

한국어 화자가 어려워하는 소리:

/f/ — ㅍ(/p/)으로 바꾸지 말고 윗니를 아랫입술에 대기: lawful /ˈlɔfl̩/, fairness /ˈfɛɚ.nəs/, specify /ˈspɛs.əˌfaɪ/, insightful /ɪnˈsaɪt.f(ə)l/, rectification /ˌɹɛktɪfɪˈkeɪʃən/
/v/ — ㅂ(/b/)과 구별하기: governance /ˈɡʌvəɹnəns/, whichever /wɪt͡ʃˈɛvɚ/, directive /daɪˈɹɛk.tɪv/, turnover /ˈtɝnoʊvɚ/, subjective /səbˈd͡ʒɛktɪv/
/z/ — ㅈ이 아니라 성대를 울리는 /s/: minimization /ˈmɪn.ɪ.mɪˈzeɪʃən/, exemption /ɪɡˈzɛm(p).ʃən/, organizational /ˌɔː(ɹ)ɡənɪˈzeɪʃənəl/, breeze /bɹiːz/

이 영상으로 연습하는 방법

먼저 말하지 않고 영상을 끝까지 듣고 모르는 단어를 적어 둡니다.
0.75배속으로 한 문장씩 섀도잉을 시작하고, 익숙해지면 보통 속도로 돌아갑니다.
자신의 목소리를 녹음해 원본과 비교하고, transparent, incompatible, minimization 같은 단어에 특히 주의합니다.

쉐도잉이란? 영어 실력을 빠르게 키우는 과학적 방법

쉐도잉(Shadowing)은 원래 전문 통역사 훈련을 위해 개발된 언어 학습 기법으로, 다언어 학자인 Dr. Alexander Arguelles에 의해 대중화된 방법입니다. 핵심 원리는 간단하지만 매우 강력합니다: 원어민의 영어를 들으면서 1~2초의 짧은 지연으로 즉시 소리 내어 따라 말하는 것——마치 '그림자(shadow)'처럼 화자를 따라가는 것입니다. 문법 공부나 수동적인 청취와 달리, 쉐도잉은 뇌와 입 근육이 동시에 실시간으로 영어를 처리하고 재현하도록 훈련합니다. 연구에 따르면 이 방법은 발음 정확도, 억양, 리듬, 연음, 청취력, 말하기 유창성을 크게 향상시킵니다. IELTS 스피킹 준비와 자연스러운 영어 소통을 원하는 분들에게 특히 효과적입니다.

섀도잉 방법: 단계별 전체 가이드 읽기 →

쉐도잉 연습: What are the 7 principles of GDPR? - 영상으로 영어 말하기 배우기

연습 모드 선택

앱 다운로드

추천 영상

HRM: Compensation and Benefits (Chapter 7)

Cybersecurity Architecture: Five Principles to Follow (and One to Avoid)

DataLayer explained in 90 seconds

Trademark enforcement: Dealing with infringement on social media and e-commerce platforms

7 metrics you NEED to know as a CEO

Never Do These 4 Things On Your Work Computer (Lawyer's Warning)

Ricardo Vargas Shows How to Implement Governance During Project Execution

What is an Organization? - the Nature of Organizations

15 IT Terms Everyone In Tech Recruitment Should Know – IT & Tech Recruitment Insights

What is clean code? - Uncle Bob

GS1-standarder för e-handel

Dangers of a Negative Safety Culture