The project in five facts.
Challenge, approach and results.
The diploma thesis addresses the compliance of private security activities with personal data protection requirements. The purpose of the research was to determine how the company Hit d. d. The research was based on descriptive and analytical methods, a review of legislation and the company's internal procedures, and a qualitative assessment of practical experience. Organisational and technical measures, such as access control to records, secure archive storage and internal audits, are clearly defined and effectively implemented, whilst audits have contributed to improvements in record-keeping and supervision. Despite positive results, shortcomings were identified, particularly the lack of formal employee training on GDPR.
Problem
The diploma thesis addresses the compliance of private security activities with personal data protection requirements. The purpose of the research was to determine how the company Hit d. d. Nova Gorica implements the provisions of the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP-2), and what the main challenges are in practice.
Private security companies process identification data, access records and video recordings on a daily basis, making compliance with legislation essential for preventing privacy violations and legal consequences.
Solution and Method
The research was based on descriptive and analytical methods, a review of legislation and the company's internal procedures, and a qualitative assessment of practical experience. Particular attention was paid to video surveillance, access control, employee monitoring and staff training. The analysis showed that the company has most key procedures in place at a high level.
Results
Organisational and technical measures, such as access control to records, secure archive storage and internal audits, are clearly defined and effectively implemented, whilst audits have contributed to improvements in record-keeping and supervision. Despite positive results, shortcomings were identified, particularly the lack of formal employee training on GDPR. The hypotheses were largely confirmed.
GDPR has had a significant impact on the operations of security companies, particularly in video surveillance, where dilemmas arise regarding the lawfulness and proportionality of data processing. Whilst some private security providers still face difficulties with a comprehensive approach to personal data protection, the company Hit d. d. Nova Gorica stands out for its well-organised procedures and responsible conduct.
The results confirm that companies which invest in supervisory mechanisms and develop a culture of data protection achieve greater long-term success, competitiveness, reputation and user trust. The work contributes to understanding the gap between legal requirements and practice in the security sector and provides guidance for improvements. It also emphasises the necessity of continuous professional development for security personnel who handle sensitive data on a daily basis.
The findings may also assist other private security providers in achieving greater compliance and reducing risks in the processing of personal data.
Module, programme and stories.
Your diploma project for a real company.
A diploma thesis at Academia solves a challenge from a company – often the one where you do your 800 hours of placement. Read about the Varovanje module or book a consultation.