Re:Salesforce enables ‘modify all’ in user profiles
by tssva on Saturday May 18, 2019 @08:29AM
(#19947045)
EU definition of a personal data breach.
> "‘personal data breach’ means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;
Based upon this definition just allowing the access is a breach.
Re:Salesforce enables ‘modify all’ in user profiles
by moduspol on Saturday May 18, 2019 @09:15AM
(#19947236)
Well it seems like a gray area. There's a meaningful difference between "accessing" something and "having access to" something. To me this seems like it would only cover the former.
> "‘personal data breach’ means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;
Based upon this definition just allowing the access is a breach.