8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
1/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
Tj~zkjc Jijnzvbqh fjl J~vzfbh
~hdtj le ~jgztbfef fj lh~ fevh~
fj netnvjt pjt~hcel jc jl kdbvh
fj le~ Jcvbfefj~ Lhnelj~
Fbegc~vbnh ~hdtj jl gtefh fj efepvenbc e le LjrHtgcbne fj _thvjnnbc fj Fevh~ -LH_F" r elczjqh Tjglekjcvh fj Fj~etthllh -TFLH_F"
HD^JTQEVHTBH FJ LE ^JGZTBFEF FJ LE BCAHTKENBC
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
2/59
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
3/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
CFBNJ
CFBNJ#################################################################################################################################> 5 #################################################################################7 BCVTHFZNNBC R HDIJVBQH^
5#5 #########################################################################################################7 Bcvthfznnbc5#4 ############################################################################################7 Hdijvbqh~ fjl j~vzfbh5#> #################################################################= _tj~jcvenbc9 Jcvbfefj~ petvbnbpecvj~
5#>#5 ###################################= Bc~vbvzvh Cenbhcel fj Vjnchlhge~ fj le Nhkzcbnenbc5#>#4 ############################################2 Ajfjtenbc J~pehle fj Kzcbnbpbh~ r _thqbcnbe~
4 #######################################################################################55 FB^JH KJVHFHLGBNH>
######################################################################5> NHCHNBKBJCVH, NHCNBJCNBENBC R E^BGCENBC FJ TJNZT^H^
NHCAHTKJ E LE CHTKEVBQE QBGJCVJ
>#5 ##############################################5> Cbqjl fj nhchnbkbjcvh fjl TFLH_F jc le~ JJLL>#4
########################################################################################################5> Cbqjl fj nhcnbjcnbenbc tj~pjnvh fjl nzkplbkbjcvh fj le chtkevbqe fj
pthvjnnbc fj fevh~
>#> ######################################################################################5> E~bgcenbc fj tjnzt~h~>#6 ########################################56 Gtefh fj efepvenbc j bkplecvenbc fj le chtkevbqe
6###################################5:
NLE^BABNENBC FJ LH^ ABNMJTH^ _HT CBQJLJ^ FJ ^JGZTBFEF R
VTEVEKBJCVH FJ ABNMJTH^ J^_JNBELKJCVJ ^JC^BDLJ^
6#5 ######################################5: Nle~babnenbc fj lh~ abnmjth~ pht cbqjlj~ fj ~jgztbfef6#4 ###############51Vtevekbjcvh fj fevh~ medbvzelj~ pht petvj fj le~ Jcvbfefj~ Lhnelj~
6#4#5 #####################################################################################51 _eftc fj medbvecvj~6#4#4 ######################################################################################57 _eftc fj qjmnzlh~6#4#> ###########################################################################################57 ^jtqbnbh~ ~hnbelj~6#4#6 ################################################57 Lbnjcnbe fj envbqbfef fj lhnelj~ nhkjtnbelj~6#4#: ###############################################################################################5= Qbfjhqbgblecnbe
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce > fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
4/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
:###########################52
BC^NTB_NBC FJ ABNMJTH^ FJ FEVH^ FJ NETNVJT _JT^HCEL,
TJ^_HC^EDLJ FJ ^JGZTBFEF R FHNZKJCVH FJ ^JGZTBFEF
:#5 #######################################################################################52 Bc~ntbpnbc fj abnmjth~:#4 ################################################################################52 Tj~phc~edlj fj ^jgztbfef:#> ##################################################################################52 Fhnzkjcvh fj jgztbfef
:#>#5 ######################################################################################52 kdbvh fj eplbnenbc:#>#4 ################################4? Kjfbfe~, chtke~, pthnjfbkbjcvh~, tjgle~ r j~vcfetj~:#>#> ##########################################################4? Azcnbhcj~ r hdlbgenbhcj~ fjl pjt~hcel:#>#6 ########4?J~vtznvzte fj lh~ abnmjth~ r fj~ntbpnbc fj lh~ ~b~vjke~ uzj lh~ vtevec:#>#: #####4?_thnjfbkbjcvh~ fj chvbabnenbc, gj~vbc r tj~pzj~ve ecvj le~ bcnbfjcnbe~:#>#1
#####################################################################################################################4? _thnjfbkbjcvh~ fj tjelbyenbc fj nhpbe~ fj tj~pelfh r fj tjnzpjtenbc fj
lh~ fevh~
:#>#7#########################################################################################4?
Kjfbfe~ cjnj~etbe~ e efhpvet pete jl vtec~phtvj, tjzvblbyenbc h fj~vtznnbc
fj ~hphtvj~ r fhnzkjcvh~
1#######################################################################################################45
LJGBVBKENBC FJ FEVH^9 BCAHTKENBHC, NHC^JCVBKBJCVH, NJ^BC R
NHCABFJCNBELBFEF
1#5 ##############45Fjdjt fj bcahtkenbc el bcvjtj~efh ~hdtj le abcelbfef fjl vtevekbjcvh1#4 ########45Fjdjt fj nhc~jcvbkbjcvh fjl bcvjtj~efh pete jl vtevekbjcvh fj lh~ fevh~1#> ############################################################################44 Gj~vbc fj le nj~bc fj fevh~1#6 ############################################################################44 Nhcabfjcnbelbfef fj lh~ fevh~
7 ####################################################################################################4> FJTJNMH^ ETNH= #######################################################################################46 KJFBFE^ FJ ^JGZTBFEF
=#5 ##################################46 Kjfbfe~ fj ~jgztbfef nhc nhcvthlj~ fj netnvjt vncbnh=#5#5 ##################################################################################46 Tjgb~vth fj bcnbfjcnbe~=#5#4 #########################################################################46 Bfjcvbabnenbc r ezvjcvbnenbc=#5#> ##########################################################################################4: Nhcvthl fj ennj~h
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 6 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
5/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
=#5#6 #######################################################################################41 Tjgb~vth fj ennj~h~
=#5#:
######################################################################################47
Vjljnhkzcbnenbhcj~
=#4 ################################################47 Kjfbfe~ fj ~jgztbfef nhc nhcvthlj~ fj gj~vbc=#4#5 ################################################################47 Gj~vbc fj ~hphtvj~ r fhnzkjcvh~=#4#4 ################################################################42 Nhpbe~ fj tj~pelfh r tjnzpjtenbc=#4#> ##############################################################################>? _tzjde~ nhc fevh~ tjelj~=#4#6 #########################################################################################################>? Ezfbvhte
2#######################>4
^Z_JTQB^BC, BC^_JNNBHCJ^, FJCZCNBE^ R ^ECNBHCJ^ FJTBQEFE^ FJL
BCNZK_LBKBJCVH FJ LE CHTKEVBQE FJ _THVJNNBC FJ FEVH^
2#5 ######################################################################################################>4 Bc~pjnnbhcj~2#4 ######################################################################################>4 Fjczcnbe~ r ~ecnbhcj~
5?##############################################################################>6
LE H_BCBC FJ LH^ J]_JTVH^ TJ^_JNVH EL GTEFH FJ EFE_VENBC J
BK_LECVENBC FJ LE CHTKEVBQE
5?#5 ###########################################################################################>: Cbqjlj~ fj kefztjy5?#5#5 ####################################################################################>1 Cbqjl 5 fj kefztjy5?#5#4 ####################################################################################>1 Cbqjl 4 fj kefztjy5?#5#> ####################################################################################>7 Cbqjl > fj kefztjy
5?#4 ##############################################################################################>= Kjihtj~ _tnvbne~5?#4#5 #########################################################>= Fj~fj jl pzcvh fj qb~ve htgecbyevbqh5?#4#4 #################################################################>2 Fj~fj jl pzcvh fj qb~ve vncbnh
5?#> ###############>2Jijkplh~ fj ne~h~ fj }bvh jc le eplbnenbc fj le~ dzjce~ ptnvbne~5?#>#5
################6?J~vtznvzte, khfjlh fj gj~vbc r envzenbhcj~ j~pjnabne~ jc kevjtbe fj
pthvjnnbc fj fevh~9 jl J}nkh# Erzcvekbjcvh fj ^ecve Ntzy fj Vjcjtbaj
5?#>#4####################################65
Ezfbvhte9 jl tje fj Nhhtfbcenbc fj Ezfbvhte r ^jgztbfef fj le
Bcahtkenbc fj le Egjcnbe Nevelece fj _thvjnnbc fj Fevh~
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce : fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
6/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 1 fj :2
5?#>#>#######64
Nhc~zlvhte9 le ^zdfbtjnnbc Gjcjtel fj Tjgb~vth fj Abnmjth~ r
Nhc~zlvhte fj le Egjcnbe fj _thvjnnbc fj Fevh~ fj le Nhkzcbfef fj Keftbf
5?#>#6##############################################################################################################66
J~vtznvzte, khfjlh fj gj~vbc r envzenbhcj~ j~pjnabne~ jc kevjtbe fj
pthvjnnbc fj fevh~9 jl Bc~vbvzvh Kzcbnbpel fj Bcahtkvbne fjl J}nkh# Erzcvekbjcvh
fj Detnjlhce
55 #########################################################################61 NHCNLZ^BHCJ^ FJL J^VZFBH54
#########################################################################################################################:4 _TH_ZJ^VE^ R TJNHKJCFENBHCJ^ FBTBGBFE^ E LH^ _HFJTJ^
_DLBNH^
54#5 ######:4_thpzj~ve~ r tjnhkjcfenbhcj~ jc kevjtbe fj nhcnbjcnbenbc r ahtkenbc54#4 ########:>_thpzj~ve~ r tjnhkjcfenbhcj~ jc kevjtbe fj fbegc~vbnh j bcahtkenbc54#> ##############################:6 _thpzj~ve~ r tjnhkjcfenbhcj~ jc kevjtbe fj abcecnbenbc54#6 ####::_thpzj~ve~ r tjnhkjcfenbhcj~ jc kevjtbe fj chtkelbyenbc r njtvbabnenbc54#:
#########################################################################:: _thpzj~ve~ r tjnhkjcfenbhcj~ jc kevjtbe fj pthkhnbc j bcnjcvbqenbc fj lh~
cbqjlj~ fj kefztjy r dzjce~ ptnvbne~
CFBNJ FJ GTABNH^#####################################################################################################:7CFBNJ FJ VEDLE^##########################################################################################################:=
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
7/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
5 BCVTHFZNNBC R HDIJVBQH^
5#5 Bcvthfznnbc
Jl hdijvbqh ptbcnbpel fjl ptj~jcvj bcahtkj, jledhtefh pht jl Bc~vbvzvh Cenbhcel fj
Vjnchlhge~ fj le Nhkzcbnenbc -jc efjlecvj, BCVJNH", j~ le tjelbyenbc fj zc
j}mez~vbqh eclb~b~, me~ve mhr bcfbvh jc ~z j}vjc~bc r pthazcfbfef, enjtne fj le
~bvzenbc envzel fj le pthvjnnbc fj fevh~ pjt~hcelj~ jc le~ Jcvbfefj~ _dlbne~ Lhnelj~
-jc efjlecvj, JJ#LL#" jc J~pee#
J~vj j~vzfbh pthphtnbhce zc fbegc~vbnh nhkpljvh r j~pjnbelbyefh, fjl gtefh fj efhpnbc
fj le ljgb~lenbc qbgjcvj, e~ nhkh zc nhcizcvh fj tjnhkjcfenbhcj~ uzj pjtkbvec e le~
Efkbcb~vtenbhcj~ le pzj~ve jc ketnme fj plecj~ fj tjgzletbyenbc r efepvenbc#
Jl ketnh chtkevbqh nhc~bfjtefh jc jl j~vzfbh nhkptjcfj9
Le Ljr Htgcbne 5:(5222, fj 5> fj fbnbjkdtj, fj _thvjnnbc fj Fevh~ fj
Netnvjt _jt~hcel -LH_F"#
Jl Tjel Fjntjvh 226(5222, fj 55 fj izcbh, pht jl uzj ~j eptzjde jl Tjglekjcvh
fj Kjfbfe~ fj ^jgztbfef fj lh~ abnmjth~ ezvhkevbyefh~ uzj nhcvjcgec fevh~ fj
netnvjt pjt~hcel -TK^"#
Jl Tjel Fjntjvh 574?(4??7, fj 45 fj fbnbjkdtj, pht jl uzj ~j eptzjde jl
Tjglekjcvh fj fj~etthllh fj le Ljr Htgcbne 5:(5222, fj 5> fj fbnbjkdtj, fj
_thvjnnbc fj Fevh~ fj Netnvjt _jt~hcel -TFLH_F"#
5#4 Hdijvbqh~ fjl j~vzfbh
Jl hdijvbqh gjcjtel fjl j~vzfbh j~ le jledhtenbc fj zc eclb~b~ ~hdtj le ~bvzenbc envzel
fj le~ Jcvbfefj~ Lhnelj~ _dlbne~ jc J~pee jc tjlenbc nhc le chtkevbqe fj pthvjnnbc
fj fevh~ fj netnvjt pjt~hcel, jc zce fhdlj qjtvbjcvj9
Fbegc~vbnh, vecvh fjl j~vefh envzel fj nzkplbkbjcvh jajnvbqh fj le ljgb~lenbc
nhkh fjl cbqjl fj ptjpetenbc pete le efjnzenbc el TFLH_F pht le~ JJ#LL# jc
J~pee#
Nhcnbjcnbenbc r ~jc~bdblbyenbc e le~ JJ#LL# pete uzj j~ve~ bcntjkjcvjc le ve~e
fj nzkplbkbjcvh fj le chtkevbqe ~hdtj pthvjnnbc fj fevh~#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 7 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
8/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
5#> _tj~jcvenbc9 Jcvbfefj~ petvbnbpecvj~
5#>#5 Bc~vbvzvh Cenbhcel fj Vjnchlhge~ fj le NhkzcbnenbcJl Bc~vbvzvh Cenbhcel fj Vjnchlhge~ fj le Nhkzcbnenbc -BCVJNH", ~hnbjfef j~vevel
pthkhqbfe pht jl Kbcb~vjtbh fj Bcfz~vtbe, Vztb~kh r Nhkjtnbh, j~ zce pleveahtke pete jl
fj~etthllh fj le ^hnbjfef fjl Nhchnbkbjcvh e vteq~ fj pthrjnvh~ fjl kdbvh fj le
bcchqenbc r le vjnchlhge nhc zc fhdlj hdijvbqh9 pht zce petvj, nhcvtbdzbt e le
nhcqjtgjcnbe fj J~pee nhc Jzthpe jc le ^hnbjfef fj le Bcahtkenbc r, fj hvte petvj,
pthkhqjt jl fj~etthllh tjgbhcel, jctebyecfh jc Ljc zc pthrjnvh nhc qhnenbc glhdel#
Le kb~bc fj BCVJNH j~ bkpzl~et r fj~etthllet pthrjnvh~ fj bcchqenbc tjlenbhcefh~ nhc
jl ~jnvht fj le~ Vjnchlhge~ fj le Bcahtkenbc r le Nhkzcbnenbc -VBN" r, jc gjcjtel, jc
jl kdbvh fj le ^hnbjfef fj le Bcahtkenbc, uzj kjihtjc le ph~bnbc fj J~pee r ephtvjc
nhkpjvbvbqbfef, j}vjcfbjcfh ~z~ nepenbfefj~ vecvh el jcvhtch jzthpjh nhkh el
levbchekjtbnech# E~, jl Bc~vbvzvh vbjcj le qhnenbc fj ~jt zc njcvth fj fj~etthllh fj
netnvjt bcchqefht r fj bcvjt~ pdlbnh e cbqjl cenbhcel uzj nhc~vbvzbt zce bcbnbevbqe
jctbuzjnjfhte r fbaz~hte fj le~ czjqe~ vjnchlhge~ jc J~pee jc nlete ~bcvhce nhc
Jzthpe#
Jl hdijvh ~hnbel fj BCVJNH j~ le gj~vbc, e~j~htekbjcvh, pthkhnbc r fbaz~bc fj
pthrjnvh~ vjnchlgbnh~ jc jl ketnh fj le ^hnbjfef fj le Bcahtkenbc# _ete jllh, BCVJNH
fj~etthllet envzenbhcj~, el kjch~, jc lcje~ j~vtevgbne~ fj ^jgztbfef Vjnchlgbne,Ennj~bdblbfef r Nelbfef fj havwetj#
K~ Bcahtkenbc9 mvvp9((www#bcvjnh#j~
Hd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc
Jl Hd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc ~j bc~jtve fjcvth fj le lcje j~vtevgbne
fj envzenbc fj BCVJNH jc kevjtbe fj ^jgztbfef Vjnchlgbne#
Jl Hd~jtqevhtbh vbjcj pht hdijvbqh fj~ntbdbt fj kecjte fjvellefe r ~b~vjkvbne jl cbqjl fj~jgztbfef r nhcabecye jc le ^hnbjfef fj le Bcahtkenbc r fj gjcjtet nhchnbkbjcvh
j~pjnbelbyefh jc le kevjtbe# Fj j~vj khfh, ~j jcnzjcvte el ~jtqbnbh fj lh~ nbzfefech~,
le~ jkptj~e~ r le~ efkbcb~vtenbhcj~ pdlbne~ j~pehle~ pete fj~ntbdbt, ecelbyet, e~j~htet
r fbazcfbt le nzlvzte fj le ^jgztbfef fj le Bcahtkenbc r le j+Nhcabecye#
Jl Hd~jtqevhtbh me fb~jefh zc _lec fj Envbqbfefj~ r J~vzfbh~ nhc jl hdijvh fj pthfznbt
nhchnbkbjcvh j~pjnbelbyefh r vbl jc kevjtbe fj ~jgztbfef pht petvj fj BCVJNH, e~
nhkh fj jledhtet tjnhkjcfenbhcj~ r pthpzj~ve~ uzj fjabcec vjcfjcnbe~ qlbfe~ pete le
vhke fj fjnb~bhcj~ azvzte~ pht petvj fj lh~ phfjtj~ pdlbnh~#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce = fj :2
http://www.inteco.es/http://www.inteco.es/http://www.inteco.es/8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
9/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
Fjcvth fj j~vj plec fj ennbc ~j tjelbyec ledhtj~ fj bcqj~vbgenbc, eclb~b~, j~vzfbh,
e~j~htekbjcvh r fbqzlgenbc uzj evjcfjtc, jcvtj hvte~, e le~ ~bgzbjcvj~ j~vtevjgbe~9
Jledhtenbc fj j~vzfbh~ j bcahtkj~ pthpbh~ jc kevjtbe fj ~jgztbfef fj le~
Vjnchlhge~ fj le Bcahtkenbc r le Nhkzcbnenbc, nhc j~pjnbel cae~b~ jc le
^jgztbfef jc Bcvjtcjv#
^jgzbkbjcvh fj lh~ ptbcnbpelj~ bcfbnefhtj~ r phlvbne~ pdlbne~ tjlenbhcefe~ nhc le
~jgztbfef fj le bcahtkenbc r le nhcabecye jc jl kdbvh cenbhcel j bcvjtcenbhcel#
Gjcjtenbc fj zce de~j fj fevh~ uzj pjtkbve jl eclb~b~ r jqelzenbc fj le
~jgztbfef r le nhcabecye nhc zce pjt~pjnvbqe vjkphtel#
Bkpzl~h fj pthrjnvh~ fj bcqj~vbgenbc jc kevjtbe fj ~jgztbfef VBN#
Fbaz~bc fj j~vzfbh~ j bcahtkj~ pzdlbnefh~ pht hvte~ jcvbfefj~ r htgecb~kh~
cenbhcelj~ j bcvjtcenbhcelj~, e~ nhkh fj bcahtkenbc ~hdtj le envzelbfef
cenbhcel r jzthpje jc kevjtbe fj le ~jgztbfef r nhcabecye jc le ^hnbjfef fj le
Bcahtkenbc#
E~j~htekbjcvh e le~ Efkbcb~vtenbhcj~ _dlbne~ jc kevjtbe fj ~jgztbfef fj le
bcahtkenbc r nhcabecye, e~ nhkh jl ephrh e le jledhtenbc, ~jgzbkbjcvh r
jqelzenbc fj phlvbne~ pdlbne~ jc j~vj kdbvh#
K~ bcahtkenbc9 mvvp9((hd~jtqevhtbh#bcvjnh#j~
5#>#4 Ajfjtenbc J~pehle fj Kzcbnbpbh~ r _thqbcnbe~
Le Ajfjtenbc J~pehle fj Kzcbnbpbh~ r _thqbcnbe~ -AJK_", j~ zce e~hnbenbc fj
ghdbjtch~ lhnelj~ uzj egtzpe Erzcvekbjcvh~, Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~
Bc~zletj~, jc vhvel k~ fj 7#4?? kzcbnbpbh~# Vbjcj nhkh hdijvbqh~, abcj~ azcfenbhcelj~ r
j~vevzvetbh~ lh~ ~bgzbjcvj~9
Jl ahkjcvh r le fjajc~e fj le ezvhchke fj le~ Jcvbfefj~ Lhnelj~#
Le tjptj~jcvenbc r fjajc~e fj lh~ bcvjtj~j~ gjcjtelj~ fj lh~ Erzcvekbjcvh~,
Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ ecvj hvte~ Efkbcb~vtenbhcj~ pdlbne~#
Le ptj~venbc fj vhfe nle~j fj ~jtqbnbh~ e le~ Jcvbfefj~ Lhnelj~#
Jl fj~etthllh r nhc~hlbfenbc fjl j~ptbvz jzthpjh jc jl kdbvh lhnel, de~efh jc le
ezvhchke r ~hlbfetbfef jcvtj vhfe~ le~ Jcvbfefj~ Lhnelj~#
Le pthkhnbc r ahkjcvh fj le~ tjlenbhcj~ fj ekb~vef r nhhpjtenbc nhc lh~
Erzcvekbjcvh~, Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ r ~z~ htgecbyenbhcj~
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 2 fj :2
http://observatorio.inteco.es/http://observatorio.inteco.es/http://observatorio.inteco.es/8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
10/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
jc jl kdbvh bcvjtcenbhcel, j~pjnbelkjcvj jl jzthpjh, jl bdjthekjtbnech r jl
tedj#
Le gj~vbc fj pthgteke~ fjl Ghdbjtch fj~vbcefh~ el tje lhnel#
K~ bcahtkenbc9 mvvp9((www#ajkp#j~
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 5? fj :2
http://www.femp.es/http://www.femp.es/http://www.femp.es/8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
11/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
4 FB^JH KJVHFHLGBNH
Le jijnznbc fjl pthrjnvh me bcnlzbfh le~ ~bgzbjcvj~ jvepe~ ptbcnbpelj~9
Jcnzj~ve~ e pjt~hcel ledhtel, azcnbhcetbh~, tj~phc~edlj~ phlvbnh~ r
nhledhtefhtj~ jc le~ Jcvbfefj~ Lhnelj~, tjelbyefe~ kjfbecvj nzj~vbhcetbh
j~pjnabnh jc azcnbc fjl ckjth fj medbvecvj~ fj nefe kzcbnbpbh petvbnbpecvj#
Jcvtjqb~ve~ e j}pjtvh~ pthnjfjcvj~ fj le~ JJ#LL#, fj le bcfz~vtbe r fj hvte~
Efkbcb~vtenbhcj~ _dlbne~ ephtvecfh ~z qelhtenbc ~hdtj dzjce~ ptnvbne~,
pthpzj~ve~ r ~z fjabcbnbc fj cbqjlj~ fj kefztjy pete phfjt e~bgcet ptbhtbfefj~
el bkpljkjcvet le~ kjfbfe~ fj ~jgztbfef#
Jledhtenbc fjl ptj~jcvj bcahtkj fhcfj ~j tjnhgj jl eclb~b~ r le~ nhcnlz~bhcj~
fj le~ ae~j~ ecvjtbhtj~, e~ nhkh le~ pthpzj~ve~ r tjnhkjcfenbhcj~ fj envzenbc#
Jl j~vzfbh me nhcvefh nhc le petvbnbpenbc fj 1?5 Jcvbfefj~ _dlbne~ Lhnelj~, fjl
nhcizcvh fj jcnzj~ve~ 25 ~hc fj pthnjfjcnbe eccbke, 676 nhttj~phcfjc e
Erzcvekbjcvh~ r >1 ~hc Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~, r fj 46 j}pjtvh~
-pthaj~bhcelj~ r tjptj~jcvecvj~ fj bc~vbvznbhcj~ fj fbqjt~e~ tje~ fj nhchnbkbjcvh"#
Jl kvhfh fj ~jljnnbc kzj~vtel ~j me tjelbyefh fj kecjte j~vtevbabnefe,fjvjtkbccfh~j jl vekeh fj le kb~ke kjfbecvj le atkzle nhttj~phcfbjcvj e zce
phdlenbc abcbve, jc le uzj ~j me j~vbkefh zc ketgjc fj jttht fj 6,64* pete zc cbqjl
fj nhcabecye fjl 2:*#
Le kzj~vte fj Erzcvekbjcvh~ ~j me fjabcbfh fj kecjte ~jgkjcvefe fj enzjtfh el
ckjth fj medbvecvj~ fjl kzcbnbpbh, j~vedljnbcfh~j 2 j~vtevh~ -Vedle 5"#
Vedle 59 _etvbnbpenbc fj jcvbfefj~ pht j~vtevh~ ~hdtj le ptjkzj~vte fj kzcbnbpbh~ r le
nhdjtvzte phdlenbhcel
J~vt C medbvecvj~-kblj~"C
kzcbnbpbh~_tjkzj~vte9 C
Kzcbnbpbh~Kzj~vte9 CKzcbnbpbh~
_etvbnbpenbc~hdtj le
ptjkzj~vte
Nhdjtvztephdlenbhcel
E K~ fj :?? 1 1 > :?,?* :?,?*D Fj 5?? e :?? :: :> 4: 67,4* 6:,:*N Fj :? e 5?? 71 7: >2 :4,?* :5,>*F Fj 5? e :? 16= :=6 5>7 4>,:* 45,5*J Fj : e 5? :47 := >> :1,2* 1,>*A Fj 4 e : 5#?51 =1 17 77,2* 1,1*G Fj 5 e 4 24> =? :2 7>,=* 1,6*M Fj ?: e 5 5#?:6 :7 >= 11,7* >,1*B Kjch~ fj ?,: >#=?7 =7 7> =>,2* 5,2*
VHVEL =#554 5#?=1 676 6>,1* :,=*
Azjcvj9 BCVJNH
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 55 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
12/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
Le petvbnbpenbc pht Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ me ~bfh tjljqecvj,
elnecycfh~j le nbate fj >1 jcvbfefj~ petvbnbpecvj~ ~hdtj zc vhvel fj :7, lh uzj
tjptj~jcve zce petvbnbpenbc fjl 1>,4* fj j~ve vbphlhge fj ghdbjtch~ lhnelj~ jc jlj~vzfbh#
Le petvbnbpenbc pht pjtabl fjl pthaj~bhcel petvbnbpecvj uzj me tj~phcfbfh el
nzj~vbhcetbh jc le~ Jcvbfefj~ _dlbne~ Lhnelj~ me ~bfh fbqjt~e, vel r nhkh tjptj~jcve jl
Gtabnh 5, jc lh tjajtjcvj e9 le nevjghte h pjtabl pthaj~bhcel fj le pjt~hce jcvtjqb~vefe r
jl phtnjcveij fj petvbnbpecvj~ envbqh~ pht pjtabl#
Fj enzjtfh nhc lh~ tj~zlvefh~ hdvjcbfh~, jl pjtabl pthaj~bhcel fjl petvbnbpecvj uzj me
nhcvj~vefh kerhtbvetbekjcvj el nzj~vbhcetbh j~ jl fj zc tj~phc~edlj bcahtkvbnh, nhc zc
>1,=* fj petvbnbpenbc, fjdbfh e uzj medbvzelkjcvj tj~zlvec ~jt lh~ pthaj~bhcelj~ e lh~uzj ~j jcnhkbjcfe bkplecvet le~ kjfbfe~ fj ~jgztbfef# Jc ~jgzcfh lzget, lh~
nzj~vbhcetbh~ mec ~bfh nhkpljvefh~ pht lh~ ~jntjvetbh~ fj le~ JJ#LL#, nhc zc 4=,7*,
nhkh tj~phc~edlj~ vncbnh~ fj lh~ e~zcvh~ ljgelj~# Lh~ netgh~ phlvbnh~ r lh~ nhcnjielj~
h fbpzvefh~ fjljgefh~ mec vjcbfh zce petvbnbpenbc kjcht nhc zc 5:,5* r 1,5*
tj~pjnvbqekjcvj#
^bc jkdetgh, jl phtnjcveij fj tj~pzj~ve~ hdvjcbfe~ pht petvj fj le abgzte fjl
Tj~phc~edlj fj ^jgztbfef fj le~ JJ#LL#, me ~bfh fj zc =,>*, aenvht bcfbnevbqh fj le aelve
fj chkdtekbjcvh j~pjnabnh fj j~ve bkphtvecvj abgzte jc le~ jcvbfefj~#
Gtabnh 59 _jtabl fj lh~ pthaj~bhcelj~ petvbnbpecvj~ jc le~ jcnzj~ve nhkh tjptj~jcvecvj~ fj
le~ JJ#LL# petvbnbpecvj~ -*"
5:,5*
=,>*
4=,7*
5,5* ?,7* ?,4*
?,4*
>1,=*
1,5*5,:*5,5* Tj~phc~edlj fj ^jtqbnbh Bcahtkevbnh
^jntjvetbh
Netgh Vjncbnh
Tj~phc~edlj fj ^jgztbfef
Netgh phlvbnh
Tj~phc~edlj fj ^jtqbnbh
Fbtjnvht TTMM
Tj~phc~edlj E~j~hte Iztfbne
Ez}blbet Efkbcb~vtevbqh
Vjncbnh Bcahtkvbnh
Hvth~
Azjcvj9 BCVJNH
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 54 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
13/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
> NHCHNBKBJCVH, NHCNBJCNBENBC R E^BGCENBC
FJ TJNZT^H^ NHCAHTKJ E LE CHTKEVBQEQBGJCVJ
Jc j~vj epetvefh ~j nhc~bfjte jl gtefh fj nhchnbkbjcvh +nhc~bfjtefh nhkh chnbc
d~bne fj lh~ e~pjnvh~ uzj nhcvbjcjc vecvh le LH_F nhkh jl TFLH_F+ nhc jl uzj
nzjcvec le~ Jcvbfefj~ Lhnelj~ nhcahtkj e le chtkevbqe qbgjcvj#
>#5 Cbqjl fj nhchnbkbjcvh fjl TFLH_F jc le~ JJLL
Jcvtj le~ JJ#LL# uzj mec petvbnbpefh jc j~vj j~vzfbh, zc 11,7* fj le~ Fbpzvenbhcj~,
Nhc~jll~ r Nedblfh~ Bc~zletj~, r ~lh zc 4=* fj lh~ Erzcvekbjcvh~, eabtkec nhchnjt jlTFLH_F#
Zc eclb~b~ jc pthazcfbfef pete nefe zch fj lh~ kzcbnbpbh~ kzj~vte uzj, lh~ uzj vbjcjc
k~ fj :??#??? medbvecvj~ ph~jjc zc nhchnbkbjcvh pljch fj le pzdlbnenbc fjl
TFLH_F# ^bc jkdetgh, lh~ kzcbnbpbh~ fj pjuzjh vekeh, jc j~pjnbel jc euzjllh~ fj
kjch~ fj :?? medbvecvj~, jl phtnjcveij uzj eabtke nhchnjtlh ~j ~bve jc zc 45,2*#
Jl TFLH_F bcnlzrj nhkh chqjfef ptbcnbpel, jl vtevekbjcvh, elkenjcekbjcvh, fj~vtznnbc
r ennj~h fj lh~ abnmjth~ fj etnmbqh~ jc pepjl# Jl nhchnbkbjcvh fj j~vj e~pjnvh pht petvj
fj lh~ erzcvekbjcvh~ j~ fbqjt~h ezcuzj pzjfj ~jt nhc~bfjtefh ph~bvbqh# Jc lh~
Erzcvekbjcvh~, jl gtefh fj nhchnbkbjcvh ~j qe tjfznbjcfh jc azcnbc fj le fb~kbcznbc
fjl vekeh fjl kzcbnbpbh# J~vh ~zphcj uzj, pht jijkplh, jc jl ne~h fj lh~ kzcbnbpbh~ fj
kjch~ fj :?? medbvecvj~, jl 7=,5* ch vbjcj nhchnbkbjcvh fj uzj jl czjqh Tjglekjcvh
fjabce kjfbfe~ fj ~jgztbfef pete lh~ abnmjth~ fj fevh~ pjt~hcelj~ jc pepjl#
>#4 Cbqjl fj nhcnbjcnbenbc tj~pjnvh fjl nzkplbkbjcvh fj le chtkevbqe fj
pthvjnnbc fj fevh~
Nzeluzbjt jkpljefh fj zce JJ#LL# +nhc bcfjpjcfjcnbe fj ~z pzj~vh+ uzj vtevj nhc fevh~fj netnvjt pjt~hcel, fjdj nhchnjt le~ chtke~ fj ~jgztbfef uzj eplbnec el fj~etthllh fj
~z~ azcnbhcj~ pete jl vbph fj vtevekbjcvh fj fevh~ pjt~hcelj~ uzj pzjfe tjelbyet# Jc jl
ptj~jcvj j~vzfbh zc 76,=* fj le~ jcvbfefj~ nzkplj nhc j~ve ledht#
>#> E~bgcenbc fj tjnzt~h~
Le~ Jcvbfefj~ _dlbne~ Lhnelj~ fjdjc fb~phcjt fj zc neljcfetbh fj nzkplbkbjcvh pete le
efepvenbc el TFLH_F jc lh~ pleyh~ j~vbpzlefh~# Jc j~vj ~jcvbfh, mec ~bfh ptjgzcvefe~
~hdtj le e~bgcenbc fj tjnzt~h~ nhkh bcfbnefht fj ~z efjnzefe plecbabnenbc#
^lh zc 45,6* fj le~ JJ#LL# petvbnbpecvj~ jc jl j~vzfbh mec tjelbyefh fbnme e~bgcenbc#
pht lh uzj fbnme kjfbfe nhc~vbvzrj zce ptzjde fjl j~azjtyh uzj j~vh~ htgecb~kh~ mec fj
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 5> fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
14/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
lljqet e nedh pete phfjt efjnzet~j# Zc eclb~b~ pht j~vtevh r vekeh fjl kb~kh, kzj~vte
zc bttjgzlet gtefh fj nzkplbkbjcvh fj j~ve hdlbgenbc# E~ jl :1,:* fj lh~ erzcvekbjcvh~
nhc gtecfj~ kzcbnbpbh~ vbjcjc plecbabnefe fbnme e~bgcenbc, atjcvj e zc >5,5* fj lh~erzcvekbjcvh~ fj kjfbech~ kzcbnbpbh~ r zc 51,=* fj lh~ fj kjcht vekeh#
Jqbfjcvjkjcvj j~vh~ tj~zlvefh~ j~vc nhcfbnbhcefh~ pht jl gtefh fj nhchnbkbjcvh fjl
TFLH_F, re uzj euzjllh~ kzcbnbpbh~ uzj fjnletec nhchnjt jl TFLH_F, vbjcjc zc
jljqefh phtnjcveij fj plecbabnenbc pete ~z efepvenbc#
>#6 Gtefh fj efepvenbc j bkplecvenbc fj le chtkevbqe
Jc j~vj jpgteaj ~j hatjnj zce qb~bc fj lh~ phtnjcveij~ fj JJ#LL# uzj nzjcvec nhc
phlvbne~ r pthnjfbkbjcvh~ fj ~jgztbfef re bkplecvefh~#
Fjl vhvel fj JJ#LL# petvbnbpecvj~ jc jl j~vzfbh ~hc, lh~ gtecfj~ kzcbnbpbh~, lh~ uzj jc
kerht kjfbfe lljqec e le ptnvbne jl j~vedljnbkbjcvh fj lh~ pthnjfbkbjcvh~ fj ~jgztbfef
j~pjnbabnefh~ jc le chtkevbqe -jcvtj zc :=,4* r zc 61,>*"# J~ zc tj~zlvefh lgbnh re uzj
j~vj vbph fj erzcvekbjcvh~ nzjcvec nhc zc kerht qhlzkjc fj tjnzt~h~ vncbnh~ z
htgecbyevbqh~ uzj pjtkbvjc jl fj~etthllh fj j~vh~ pthnjfbkbjcvh~#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 56 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
15/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
6 NLE^BABNENBC FJ LH^ ABNMJTH^ _HT CBQJLJ^
FJ ^JGZTBFEF R VTEVEKBJCVH FJ ABNMJTH^J^_JNBELKJCVJ JC^BDLJ^
Le chtkevbqe qbgjcvj ~hdtj pthvjnnbc fj fevh~ fj~nec~e jc le fbajtjcnbenbc fj lh~
fevh~ r lh~ tjuzb~bvh~ fj ~jc~bdblbfef pete ~z cbqjl fj pthvjnnbc#
6#5 Nle~babnenbc fj lh~ abnmjth~ pht cbqjlj~ fj ~jgztbfef
Lh~ abnmjth~ ~j nle~babnec evjcfbjcfh el vbph fj fevh~ pjt~hcelj~ uzj nhcvbjcjc jc9
abnmjth~ fj cbqjl d~bnh, kjfbh r elvh# J~ve nle~babnenbc bkplbne jl j~vedljnbkbjcvh fj
kjfbfe~ fj ~jgztbfef fj ahtke enzkzlevbqe, petvbjcfh fj zce nhc~bfjtenbc fj kcbkh~ljgelj~ j}bgbdlj~#
Vedle 49 Cbqjlj~ fj ^jgztbfef
CBQJL D^BNH
Chkdtj, epjllbfh~, FCB,vjlahch, fhkbnblbh, c nvedecnetbe# Lh~ tjajtbfh~ e bfjhlhge,
eablbenbc ~bcfbnel, tjlbgbc,ntjjcnbe~, htbgjc tenbel, ~elzf hqbfe ~j}zel, nzecfh lh~ fevh~ ~jzvblbnjc cbnekjcvj nhc leabcelbfef fj tjelbyet zcevte~ajtjcnbe fbcjtetbe e le~jcvbfefj~ fj le~ uzj lh~eajnvefh~ ~jec kbjkdth~#
Lh~ abnmjth~ ch ezvhkevbyefh~uzj fj ahtke bcnbfjcvelnhcvjcgec fevh~ j~pjnbelkjcvjpthvjgbfh~ Lh~ abnmjth~ nzrh vtevekbjcvhvjcge nhkh abcelbfef jl
nzkplbkbjcvh fj fjdjtj~pdlbnh~, jc jl ne~h fj fevh~nhkh jl gtefh fj kbcz~qele h lefjnletenbc fj le nhcfbnbc fjbcqelbfjy#
CBQJL KJFBH
Nhkb~bc fj bcatennbhcj~efkbcb~vtevbqe~ h pjcelj~# Euzjllh fj lh~ uzj ~jec tj~phc~edlj~Efkbcb~vtenbhcj~ vtbdzvetbe~ r ~j
tjlenbhcjc nhc jl jijtnbnbh fj ~z~phvj~vefj~ vtbdzvetbe~# Abnmjth~ fj jcvbfefj~ gj~vhte~,~jtqbnbh~ nhkzcj~ fj le ^jgztbfef^hnbel, kzvze~ fj ennbfjcvj~ fjvtedeih r jcajtkjfefj~ pthaj~bhcelj~fj le ^jgztbfef ^hnbel# Menbjcfe pdlbne -fevh~ tjlevbqh~ evtbdzvh~ z hvte~ hdlbgenbhcj~ ab~nelj~uzj vteve le efkbcb~vtenbc ch lh~tjlevbqh~ e lh~ bkpzj~vh~ uzj fjnletecle~ jkptj~e~+"# Fevh~ uzj pjtkbvec fjfznbt jlnhkphtvekbjcvh fj lh~ nbzfefech~#
CBQJL ELVH
Bfjhlhge h eablbenbc~bcfbnel# Tjlbgbc h ntjjcnbe~# Htbgjc tenbel h vcbnh# ^elzf -~jtqbnbh~~hnbelj~, cjnj~bfef fjevjcnbc kfbnej~pjnbel"# Qbfe ~j}zel# Tjnhgbfh~ pete abcj~phlbnbelj~ ~bcnhc~jcvbkbjcvh fjlbcvjtj~efh# Qbhljcnbe fj gcjth#
CBQJL D^BNH
Chkdtj, epjllbfh~, FCB,vjlahch, fhkbnblbh, c nvedecnetbe# Lh~ tjajtbfh~ e bfjhlhge,
eablbenbc ~bcfbnel, tjlbgbc,ntjjcnbe~, htbgjc tenbel, ~elzf hqbfe ~j}zel, nzecfh lh~ fevh~ ~jzvblbnjc cbnekjcvj nhc leabcelbfef fj tjelbyet zcevte~ajtjcnbe fbcjtetbe e le~jcvbfefj~ fj le~ uzj lh~eajnvefh~ ~jec kbjkdth~#
Lh~ abnmjth~ ch ezvhkevbyefh~uzj fj ahtke bcnbfjcvelnhcvjcgec fevh~ j~pjnbelkjcvjpthvjgbfh~ Lh~ abnmjth~ nzrh vtevekbjcvhvjcge nhkh abcelbfef jl
nzkplbkbjcvh fj fjdjtj~pdlbnh~, jc jl ne~h fj fevh~nhkh jl gtefh fj kbcz~qele h lefjnletenbc fj le nhcfbnbc fjbcqelbfjy#
CBQJL KJFBH
Nhkb~bc fj bcatennbhcj~efkbcb~vtevbqe~ h pjcelj~# Euzjllh fj lh~ uzj ~jec tj~phc~edlj~Efkbcb~vtenbhcj~ vtbdzvetbe~ r ~j
tjlenbhcjc nhc jl jijtnbnbh fj ~z~phvj~vefj~ vtbdzvetbe~# Abnmjth~ fj jcvbfefj~ gj~vhte~,~jtqbnbh~ nhkzcj~ fj le ^jgztbfef^hnbel, kzvze~ fj ennbfjcvj~ fjvtedeih r jcajtkjfefj~ pthaj~bhcelj~fj le ^jgztbfef ^hnbel# Menbjcfe pdlbne -fevh~ tjlevbqh~ evtbdzvh~ z hvte~ hdlbgenbhcj~ ab~nelj~uzj vteve le efkbcb~vtenbc ch lh~tjlevbqh~ e lh~ bkpzj~vh~ uzj fjnletecle~ jkptj~e~+"# Fevh~ uzj pjtkbvec fjfznbt jlnhkphtvekbjcvh fj lh~ nbzfefech~#
CBQJL ELVH
Bfjhlhge h eablbenbc~bcfbnel# Tjlbgbc h ntjjcnbe~# Htbgjc tenbel h vcbnh# ^elzf -~jtqbnbh~~hnbelj~, cjnj~bfef fjevjcnbc kfbnej~pjnbel"# Qbfe ~j}zel# Tjnhgbfh~ pete abcj~phlbnbelj~ ~bcnhc~jcvbkbjcvh fjlbcvjtj~efh# Qbhljcnbe fj gcjth#
Azjcvj9 BCVJNH
Nhc jl abc fj jqelzet le nle~babnenbc fj lh~ abnmjth~ pht cbqjlj~ jc le~ JJ#LL#, ~j mec
~jljnnbhcefh lh~ ~bgzbjcvj~ ~jb~ vbph~ fj abnmjth~ nhc fevh~ pjt~hcelj~ uzj
medbvzelkjcvj vtevec9
Envbqbfefj~ nzlvztelj~, jfznevbqe~ r fjphtvbqe~#
Gj~vbc fj j}pjfbjcvj~ efkbcb~vtevbqh~#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 5: fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
16/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
Njkjcvjtbh#
Erzfe~ r ~zdqjcnbhcj~#
Etnmbqh mb~vtbnh#
Dbdlbhvjne kzcbnbpel#
Lh~ tj~zlvefh~ tjaljiec zc ptjfhkbcbh fj nle~babnenbc fj lh~ fevh~ nhc cbqjl fj ~jgztbfef
d~bnh nhc zc phtnjcveij ~zpjtbht el 1=*# Ch hd~vecvj, ~j jqbfjcnbe zce mjvjthgjcjbfef
jc j~ve nle~babnenbc pete jl kb~kh vbph fj abnmjth# _ht jijkplh, lh~ abnmjth~ fj
j}pjfbjcvj~ vbjcjc zc phtnjcveij fj nle~babnenbc fj cbqjl deih fjl 1=* r fj nle~babnenbc
fj cbqjl kjfbh fjl 46,1*#
^hc lh~ erzcvekbjcvh~ fj pjuzjh~ kzcbnbpbh~ lh~ uzj hvhtgec zc cbqjl elvh fj
nle~babnenbc nhc phtnjcveij~ uzj h~nblec jcvtj zc 2?,2* jc htgecb~kh~ uzj lh e~bgcec e
abnmjth~ fj envbqbfefj~ nzlvztelj~, jfznevbqe~ r fjphtvbqe~ r zc 76,2* fj erzcvekbjcvh~
uzj lh e~bgcec e lh~ abnmjth~ fj gj~vbc fj j}pjfbjcvj~#
6#4 Vtevekbjcvh fj fevh~ medbvzelj~ pht petvj fj le~ Jcvbfefj~ Lhnelj~
^j mec bfjcvbabnefh lh~ ~bgzbjcvj~ abnmjth~, vhfh~ jllh~ nhc zce elve pthdedblbfef fj
j}b~vjcnbe jc le~ JJ#LL#, nhkh abnmjth~ j~pjnbelkjcvj ~jc~bdlj~9
6#4#5 _eftc fj medbvecvj~
Vhfe~ le~ pjt~hce~ uzj qbqjc jc J~pee vbjcjc le hdlbgenbc fj bc~ntbdbt~j jc jl peftc
kzcbnbpel fj medbvecvj~ fjl lzget fhcfj vjcgec ~z tj~bfjcnbe medbvzel, ~jgc le Ljr
7(52=:, fj 4 fj edtbl, Tjgzlefhte fj le~ De~j~ fj Tgbkjc Lhnel#
Le~ JJ#LL# ch vbjcjc jl fjdjt fj tjnedet jl nhc~jcvbkbjcvh fjl bcvjtj~efh pete jl
vtevekbjcvh fj lh~ fevh~ fjl peftc, re uzj, nhkh bcfbne jl etvnzlh 1#4 fj le LH_F, jl
peftc ahtke petvj fj le~ azcnbhcj~ efkbcb~vtevbqe~ uzj ~hc nhkpjvjcnbe fj lh~
Erzcvekbjcvh~# Le Efkbcb~vtenbc uzj ~hlbnbvj fevh~ fjl peftc e zc Erzcvekbjcvh,
j}njpvh le~ Azjtye~ r Nzjtph~ fj ^jgztbfef fjl J~vefh j}jcve~ pht jl etvnzlh 44#4,
fjdj iz~vbabnet uzj ~hc pete elgzce fj le~ nhkpjvjcnbe~ uzj lj tjnhchnj jl htfjcekbjcvh
iztfbnh, efjk~ fj etgzkjcvet le tjljqecnbe fj le tj~bfjcnbe h jl fhkbnblbh pete j~vj
vtevekbjcvh#
Tj~pjnvh e le~ kjfbfe~ fj ~jgztbfef e eplbnet e j~vj vbph fj abnmjth~, fjdj vjcjt~j jc
nzjcve uzj ~j vteve fj fevh~ nle~babnefh~ nhkh fj cbqjl d~bnh#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 51 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
17/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
6#4#4 _eftc fj qjmnzlh~
Le abcelbfef fjl vtevekbjcvh fj lh~ fevh~ fj j~vj abnmjth j~ le tjnezfenbc fjl bkpzj~vh
kzcbnbpel fj nbtnzlenbc, efjk~ fj kecvjcjt zc tjgb~vth fj pthpbjvetbh~ fj qjmnzlh~-pht jijkplh, pete le gj~vbc fj vtec~ajtjcnbe~"#
Le LH_F pjtkbvj uzj jl tj~phc~edlj fjl abnmjth medblbvj jl ennj~h kevjtbel e fevh~ fj
netnvjt pjt~hcel pht petvj fj le jcvbfef uzj qe e ptj~vetlj zc ~jtqbnbh, uzj ~j nhc~vbvzbt
nhkh jcnetgefh fjl vtevekbjcvh# ^b dbjc ~j j}bgj uzj jc jl nhcvtevh nhc~vjc zce ~jtbj fj
tjuzb~bvh~, velj~ nhkh ~jgzbt le~ bc~vtznnbhcj~ fjl tj~phc~edlj fjl abnmjth, ch zvblbyet lh~
fevh~ pete zc abc fb~vbcvh, ch nhkzcbnetlh~ e hvte~ pjt~hce~, j~vbpzlet le~ kjfbfe~ fj
~jgztbfef fjl etvnzlh 2 r, nzkplbfe le ptj~venbc, fj~vtzbt lh~ fevh~ h pthnjfjt e ~z
fjqhlznbc el tj~phc~edlj fjl abnmjth#
6#4#> ^jtqbnbh~ ~hnbelj~
Lh~ ^jtqbnbh~ ^hnbelj~ j~vc fb~phcbdlj~ r ~hc ennj~bdlj~ pete vhfh~ lh~ nbzfefech~ ~bc
fb~ntbkbcenbc# Lh~ abnmjth~ fj fevh~ pjt~hcelj~ gj~vbhcefh~ pht lh~ ^jtqbnbh~ ^hnbelj~
fj le~ Jcvbfefj~ _dlbne~ Lhnelj~ ~j nle~babnec nhkh cbqjl fj ~jgztbfef elvh#
Le LH_F, jc ~z etvnzlh 7, nhc~bfjte nhkh fevh~ fj cbqjl elvh lh~ tjlevbqh~ e le bfjhlhge,
eablbenbc ~bcfbnel, tjlbgbc r ntjjcnbe~, e~ nhkh lh~ fevh~ pjt~hcelj~ uzj megec
tjajtjcnbe el htbgjc tenbel, e le ~elzf r e le qbfe ~j}zel# ^b dbjc, tj~pjnvh e lh~ ptbkjth~
cbnekjcvj ~j pzjfj lljqet e nedh jl vtevekbjcvh nhc jl nhc~jcvbkbjcvh j}ptj~h r pht
j~ntbvh fjl bcvjtj~efh# Tj~pjnvh e lh~ ~jgzcfh~, ~hlh phftc ~jt tjnedefh~ nzecfh e~ lh
fb~phcge zce Ljr h nzecfh jl eajnvefh nhc~bjcve j}ptj~ekjcvj#
_ht lh vecvh, nzecfh zce JJ#LL# tjnedj fevh~ fjdjt kecbaj~vet zce efjnzefe
iz~vbabnenbc fj le abcelbfef fj le pthpbe ptj~venbc ~hnbel#
6#4#6 Lbnjcnbe fj envbqbfef fj lhnelj~ nhkjtnbelj~
Le ~hlbnbvzf fj zce lbnjcnbe fj envbqbfef j~ zc envh hdlbgevhtbh r ptjqbh el bcbnbh fj
nzeluzbjt envbqbfef jkptj~etbel uzj cjnj~bvj zdbnet~j jc zc lhnel#
Jl cbqjl fj nle~babnenbc fj lh~ fevh~ fj j~vh~ abnmjth~ j~ d~bnh, pht lh uzj fjdjc
eplbnet~j le~ kjfbfe~ fj ~jgztbfef nhttj~phcfbjcvj~ bcfbnefe~ jc jl TFLH_F#
J~ medbvzel jc le~ JJ#LL# uzj j~ve ~hlbnbvzf ~j tjelbnj jc ahtkevh pepjl, pht lh uzj ~j
fjdj bcnhtphtet e le kb~ke zc vj}vh j}plbnevbqh jc jl uzj ~j bcfbuzjc nletekjcvj lh~
~bgzbjcvj~ pzcvh~9
J}b~vjcnbe fj zc abnmjth, fjnletefh jc le Egjcnbe J~pehle fj _thvjnnbc fj
Fevh~, fhcfj ~j qec e bcnhtphtet lh~ fevh~ fj le ~hlbnbvzf bcfbnecfh uzbjc j~ jltj~phc~edlj fjl abnmjth#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 57 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
18/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
Abcelbfef fjl vtevekbjcvh fj lh~ fevh~#
Nj~bhcj~ e vjtnjth~ jc jl ne~h fj uzj ~j pthfzynec#
Ahtke fj jijtnjt lh~ fjtjnmh~ fjl bcvjtj~efh9 ennj~h, tjnvbabnenbc, necnjlenbc r
hph~bnbc, hatjnbjcfh zc kjfbh fj nhcvenvh nhc le jcvbfef pete phfjt nhcvenvet#
6#4#: Qbfjhqbgblecnbe
Le nepvenbc r gtedenbc fj bkgjcj~ fj pjt~hce~ a~bne~ bfjcvbabnefe~ h bfjcvbabnedlj~
pht kjfbh fj ~b~vjke~ fj qbfjhnkete~, j~ nhc~bfjtefh pht le LH_F, ~jgc ~z etvnzlh
>#e, nhkh fevh fj netnvjt pjt~hcel# ^j nhc~bfjte vtevekbjcvh fj fevh~ pjt~hcelj~9 le
nepvenbc, gtedenbc, nhc~jtqenbc, khfbabnenbc, dlhuzjh, r nj~bc fj bkgjcj~#
Le~ ptbcnbpelj~ j}bgjcnbe~ e bkplecvet ~hc le~ ~bgzbjcvj~9
^j fjdj nhlhnet, jc le~ yhce~ qbfjhqbgblefe~, zc fb~vbcvbqh bcahtkevbqh
~zabnbjcvjkjcvj qb~bdlj# J~vj fb~vbcvbqh fjdjt bcnlzbt zce tjajtjcnbe e le Ljr
Htgcbne 5:(5222, fj 5> fj fbnbjkdtj, fj _thvjnnbc fj Fevh~ fj Netnvjt
_jt~hcel, zce kjcnbc e le abcelbfef fjl vtevekbjcvh -YHCE QBFJHQBGBLEFE",
r ecvj uzbjc pzjfj jijtnbvet~j lh~ fjtjnmh~ jc kevjtbe fj pthvjnnbc fj fevh~#
^lh ~j nhc~bfjtet efkb~bdlj le bc~velenbc fj nkete~ nzecfh le abcelbfef fjqbgblecnbe ch pzjfe hdvjcjt~j kjfbecvj hvth~ kjfbh~#
Jl abnmjth fj bkgjcj~ fj qbfjhqbgblecnbe j}bgj ~z ptjqbe chvbabnenbc e le Egjcnbe
J~pehle fj _thvjnnbc fj Fevh~, pete le bc~ntbpnbc jc ~z Tjgb~vth Gjcjtel#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 5= fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
19/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
: BC^NTB_NBC FJ ABNMJTH^ FJ FEVH^ FJ
NETNVJT _JT^HCEL, TJ^_HC^EDLJ FJ^JGZTBFEF R FHNZKJCVH FJ ^JGZTBFEF
J~vj epetvefh kzj~vte jl cbqjl fj nhchnbkbjcvh jc tjlenbc nhc le bc~ntbpnbc fj abnmjth~
fj fevh~ fj netnvjt pjt~hcel, le hdlbgenbc fj fj~bgcet zc tj~phc~edlj fj ~jgztbfef r le
fjabcbnbc fjl elnecnj fjl fhnzkjcvh fj ~jgztbfef#
:#5 Bc~ntbpnbc fj abnmjth~
Le fjnletenbc fj lh~ abnmjth~ jc jl tjgb~vth fj le EJ_F pht petvj fj le~ JJ#LL# j~ zce
ptnvbne phnh j}vjcfbfe e cbqjl glhdel nhkh kzj~vte jl mjnmh fj uzj lh merec tjelbyefhjl 61,6* fj lh~ erzcvekbjcvh~ atjcvj e zc 6>* uzj ch lh~ me fjnletefh r zc 5?,:* uzj
fbnj fj~nhchnjtlh# Jc jl ne~h fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~, zc
==,2* fj le~ kb~ke~ eabtke medjtlh tjelbyefh atjcvj e ~lh zc =,>* uzj ch lh me mjnmh#
Jl eclb~b~ pht j~vtevh~ pjtkbvj nhkpthdet uzj jl cbqjl fj nzkplbkbjcvh j~ elvh jc jl ne~h
fj lh~ gtecfj~ kzcbnbpbh~ fhcfj zc 24,:* fj lh~ kb~kh~ tjelbyec j~ve ennbc r jc lh~
fj kjfbech vekeh -17,2*"# Jc jl lefh hpzj~vh ~j jcnzjcvtec lh~ kzcbnbpbh~ fj kjcht
vekeh fhcfj zc >7,4* lh tjelbyec# Le j}njpnbc pete j~vj j~vtevh j~v jc jl ne~h fj lh~
ghdbjtch~ fj lhnelbfefj~ fj :?? e 5#??? medbvecvj~ -::,>*"#
:#4 Tj~phc~edlj fj ^jgztbfef
Le~ jcvbfefj~ fjdjc chkdtet zc tj~phc~edlj fj ~jgztbfef pete uzj mere zce abgzte,
nhchnbfe pht vhfh~, jcnetgefe fj qjlet pht jl nzkplbkbjcvh fj le chtkevbqe# ^bc
jkdetgh, le tjelbfef kzj~vte uzj ~lh me ~bfh fj~bgcefh pht zc 4=,7* fj lh~
erzcvekbjcvh~ e cbqjl glhdel r pht jl :4,=* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~
Bc~zletj~# Le nhdjtvzte pht cbqjl fj j~vtevh kzj~vte uzj vtj~ j~vtevh~ ~zpjtec jl :?* r
lh~ fh~ j~vtevh~ fj kjch~ fj 5#??? medbvecvj~ ch elnecyec jl 4?*#
:#> Fhnzkjcvh fj ^jgztbfef
J~vj fhnzkjcvh tjnhgj le~ kjfbfe~ vncbne~ r htgecbyevbqe~ fj hdlbgefh nzkplbkbjcvh
pete vhfh jl pjt~hcel nhc ennj~h e lh~ ~b~vjke~ fj bcahtkenbc, pht lh uzj j~ cjnj~etbh
tjqb~etlh fj ahtke pjtbfbne pete uzj j~v ~bjkptj efjnzefh e lh~ nekdbh~ uzj ~j
pthfzynec jc le Jcvbfef# Efjk~ fjdj nhcvjcjt lh~ ~bgzbjcvj~ e~pjnvh~9
:#>#5 kdbvh fj eplbnenbc
Jcvtj le~ JJ#LL# j~ zce ptnvbne phnh nhkc le fjabcbnbc fjl elnecnj re uzj ~lh jl
>:,>* fj le~ kb~ke~ e cbqjl glhdel lh me tjelbyefh# ^bc jkdetgh, jl nzkplbkbjcvh j~kerht jcvtj lh~ kzcbnbpbh~ nhc kerht ckjth fj medbvecvj~, fhcfj jl 72,:* fj lh~ fj
:?#??? medbvecvj~ r jl 5??* fj lh~ fj :??#??? medbvecvj~ lh tjelbye#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 52 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
20/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
:#>#4 Kjfbfe~, chtke~, pthnjfbkbjcvh~, tjgle~ r j~vcfetj~
Jl phtnjcveij fj JJ#LL# uzj e cbqjl glhdel le~ mec bkpljkjcvefh j~ fjl >:,7* pete lh~
erzcvekbjcvh~ r fjl 15,5* pete le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~, atjcvj el62,4* r el >>,>* uzj ch lh mec tjelbyefh#
:#>#> Azcnbhcj~ r hdlbgenbhcj~ fjl pjt~hcel
Zc 61,5* fj lh~ erzcvekbjcvh~ e cbqjl glhdel r zc :1,=* fj le~ Fbpzvenbhcj~, Nhc~jll~ r
Nedblfh~ Bc~zletj~ eabtkec vjcjtle~ fjabcbfe~ r fbazcfbfe~#
:#>#6 J~vtznvzte fj lh~ abnmjth~ r fj~ntbpnbc fj lh~ ~b~vjke~ uzj lh~ vtevec
Zc >=,5* fj lh~ Erzcvekbjcvh~ lljqec e nedh j~ve azcnbc atjcvj e zc 7:* fj
Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~# _ht j~vtevh, fj~vene uzj jl 5??* fj lh~erzcvekbjcvh~ nhc k~ fj :??#??? medbvecvj~ lh tjelbyec# Jc jl lefh hpzj~vh, jcvtj lh~
erzcvekbjcvh~ fj kjcht vekeh, ~lh jl 46,7* fj lh~ fj kjch~ fj :?? medbvecvj~ lh
jajnvec#
:#>#: _thnjfbkbjcvh~ fj chvbabnenbc, gj~vbc r tj~pzj~ve ecvj le~ bcnbfjcnbe~
Eabtkec tjelbyetlh e cbqjl glhdel zc 47,1* fj lh~ Erzcvekbjcvh~ r zc >1,5* fj le~
Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~# _ht j~vtevh~ le ~bvzenbc, ~elqh jc jl ne~h fj
lh~ erzcvekbjcvh~ fj k~ fj :??#??? medbvecvj~ nhc zc 5??*, qete jcvtj jl 1=*+:2*
pete lh~ fj kerht ckjth fj medbvecvj~# Lh~ fj vekeh bcvjtkjfbh qetec jcvtj zc>>,>* r zc 61,7*# _ht lvbkh lh~ fj kjch~ fj :?? medbvecvj~, nzkpljc nhc lh
j~vedljnbfh zc 57,=*#
:#>#1 _thnjfbkbjcvh~ fj tjelbyenbc fj nhpbe~ fj tj~pelfh r fj tjnzpjtenbc fj
lh~ fevh~
E cbqjl glhdel jl 66* fj lh~ Erzcvekbjcvh~ r zc 74* fj le~ Fbpzvenbhcj~, Nhc~jll~ r
Nedblfh~ Bc~zletj~ j~vedljnjc j~vj vbph fj pthnjfbkbjcvh~#
:#>#7 Kjfbfe~ cjnj~etbe~ e efhpvet pete jl vtec~phtvj, tjzvblbyenbc h
fj~vtznnbc fj ~hphtvj~ r fhnzkjcvh~
E cbqjl glhdel zc 4=,>* fj lh~ Erzcvekbjcvh~ r zc 66,6* fj le~ Fbpzvenbhcj~, Nhc~jll~ r
Nedblfh~ Bc~zletj~ eabtkec tjelbyetlh# ^lh jc lh~ erzcvekbjcvh~ fj jcvtj :?#??? r
:??#??? medbvecvj~ ~j ~zpjte jl 16* fj nhdjtvzte# Jc lh~ kzcbnbpbh~ fj kjch~ fj 4#???
medbvecvj~ ch ~j ~zpjte jl >:,1*, fj~venecfh lh~ fj kjch~ fj :?? medbvecvj~ jc lh~ uzj
cbnekjcvj zc 51,6* vbjcjc bkplecvefe j~ve ptnvbne#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 4? fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
21/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
1 LJGBVBKENBC FJ FEVH^9 BCAHTKENBHC,
NHC^JCVBKBJCVH, NJ^BC R NHCABFJCNBELBFEFJl vtevekbjcvh fj lh~ fevh~ pjt~hcelj~ pht zce Jcvbfef Lhnel, me fj nzkplbt nhc le
chtkevbqe qbgjcvj, jc lh tjlevbqh e le tjnhgbfe fj le bcahtkenbc -etv# : fj le LH_F", e ~z
kecvjcbkbjcvh r envzelbyenbc -etv# 6 fj le LH_F", el vtevekbjcvh r le nj~bc e vjtnjth~
-etv# 55 r 54 fj le LH_F", r e le aenblbvenbc fj lh~ fjtjnmh~ fj lh~ nbzfefech~ -Vbvzlh BBB
fj le LH_F"#
1#5 Fjdjt fj bcahtkenbc el bcvjtj~efh ~hdtj le abcelbfef fjl vtevekbjcvh
Lh~ tj~phc~edlj~ fj abnmjth~ h vtevekbjcvh~ vbjcjc le hdlbgenbc fj bcahtket e lh~nbzfefech~ ~hdtj9
Le bcnhtphtenbc fj ~z~ fevh~ e zc abnmjth#
Le bfjcvbfef r fbtjnnbc fjl tj~phc~edlj#
Le abcelbfef fjl abnmjth#
Lh~ fj~vbcevetbh~ fj le bcahtkenbc#
Le ph~bdblbfef fj jijtnbvet lh~ fjtjnmh~ fj ennj~h, tjnvbabnenbc, necnjlenbc r
hph~bnbc#
Zc 17,:* fj lh~ Erzcvekbjcvh~ r zc 74,4* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~
Bc~zletj~ fjnletec nzkplbt nhc jl fjdjt fj bcahtkenbc# E cbqjl fj j~vtevh~ jl
nzkplbkbjcvh qete jcvtj zc 2?,7*, zc 75,5* r zc 1:,1* fj lh~ erzcvekbjcvh~ fj
gtecfj~, kjfbech~ r pjuzjh~ kzcbnbpbh~ tj~pjnvbqekjcvj#
1#4 Fjdjt fj nhc~jcvbkbjcvh fjl bcvjtj~efh pete jl vtevekbjcvh fj lh~ fevh~
J~vj fjdjt bkplbne le hdlbgenbc fj ~hlbnbvet jl nhc~jcvbkbjcvh j}plnbvh fj le~ pjt~hce~a~bne~ vbvzletj~ fj lh~ fevh~, ecvj~ fj le tjnhgbfe fj lh~ kb~kh~, pete pthnjfjt
ph~vjtbhtkjcvj e ~z vtevekbjcvh#
Jl etv# 5?#> fjl TFLH_F ~jele uzj lh~ fevh~ phftc vtevet~j ~bc cjnj~bfef fjl
nhc~jcvbkbjcvh fjl bcvjtj~efh pete jl jijtnbnbh fj le~ azcnbhcj~ pthpbe~ fj le~
Efkbcb~vtenbhcj~ pdlbne~ jc jl kdbvh fj le~ nhkpjvjcnbe~ uzj lj~ evtbdzre zce chtke
nhc tecgh fj Ljr h zce chtke fj fjtjnmh nhkzcbvetbh#
E cbqjl glhdel, jl >1,6* fj Erzcvekbjcvh~ hdvbjcjc jl nhc~jcvbkbjcvh, ~bjcfh lh~kzcbnbpbh~ fj kerht ckjth fj medbvecvj~, lh~ fj :?#??? e 5??#??? medbvecvj~, nhc zc
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 45 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
22/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
12,4*, lh~ uzj k~ nzkpljc nhc j~vj tjuzb~bvh# Jc jl lefh hpzj~vh, ~j jcnzjcvtec lh~
pjuzjh~ erzcvekbjcvh~ uzj ch ~zpjtec jl 6?*#
1#> Gj~vbc fj le nj~bc fj fevh~
^j jcvbjcfj pht nj~bc fj fevh~ vhfe tjqjlenbc fj fevh~ tjelbyefe e zce pjt~hce a~bne
h iztfbne fb~vbcve fjl bcvjtj~efh#
Lh~ fevh~ fj netnvjt pjt~hcel hdijvh fjl vtevekbjcvh ~lh phftc ~jt nhkzcbnefh~ e zc
vjtnjth pete jl nzkplbkbjcvh fj abcj~ fbtjnvekjcvj tjlenbhcefh~ nhc le~ azcnbhcj~
bcahtkefe~, r deih jl ptjqbh nhc~jcvbkbjcvh fjl bcvjtj~efh, ~jgc jl etv# 55 fj le LH_F r
jl etv# 5? fjl TFLH_F#
^j vteve fj zce kjfbfe uzj e cbqjl glhdel lh tjelbyec jl 61,2* fj lh~ Erzcvekbjcvh~ r zc
::,1* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~# ^bc jkdetgh ~b lh j~v pete lh~
erzcvekbjcvh~ fj gtecfj~ kzcbnbpbh~ fhcfj zc 75,7* lh lljqe e nedh atjcvj e zc :>,5*
r zc 66* fj lh~ erzcvekbjcvh~ fj kjfbech~ r pjuzjh~ kzcbnbpbh~#
1#6 Nhcabfjcnbelbfef fj lh~ fevh~
Jl tj~phc~edlj fj lh~ abnmjth~ fjdj getecvbyet kjfbecvj jl j~vedljnbkbjcvh fj nlz~zle~
fj nhcabfjcnbelbfef jl fjdjt fj gzetfet ~jntjvh ~hdtj le bcahtkenbc vtevefe# J~ve~ fjdjc
~jt abtkefe~ pht jl pjt~hcel fj le jcvbfef uzj vjcge ennj~h e lh~ abnmjth~ r eajnvec vecvh
el pjt~hcel fj le pthpbe jcvbfef nhkh e lh~ vjtnjth~ nhc lh~ uzj ~j vjcge elgc vbph fj
enzjtfh#
E cbqjl glhdel, zc 4=,2* fj lh~ Erzcvekbjcvh~ lh lljqe e nedh# Jc jl ne~h fj le~
Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ le ~bvzenbc kjihte re uzj zc 66,6* lh
tjelbye# ^bc jkdetgh, j~v ~bvzenbc j~ k~ pvbke jc lh~ ghdbjtch~ fj vhfh~ lh~ cnljh~
fj jcvtj :?#??? r :??#??? medbvecvj~ fhcfj k~ fj zc 76* fj le~ jcvbfefj~ tjelbyec
j~v ptnvbne#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 44 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
23/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
7 FJTJNMH^ ETNH
Zch fj lh~ pzcvh~ nleqj fj le LH_F qbjcj nhc~vbvzbfh pht lh~ fjtjnmh~ fj ennj~h,tjnvbabnenbc, necnjlenbc r hph~bnbc -nhchnbfh~ nhkh fjtjnmh~ E#T#N#H#", tjnhchnbfh~
e lh~ vbvzletj~ fj lh~ fevh~# Fj ahtke dtjqj, ~j pzjfjc fj~ntbdbt fj le ~bgzbjcvj ahtke9
Ennj~h9 hdlbgenbc fj bcahtket gtevzbvekjcvj fj vhfh~ euzjllh~ fevh~ uzj ~j
ph~jjc ~hdtj zc nbzfefech#
Tjnvbabnenbc9 nzeluzbjt bcfbqbfzh, vbjcj fjtjnmh e le nhttjnnbc fj vhfh~ euzjllh~
fevh~ uzj nhc~bfjtj bcj}envh~ h bcnhkpljvh~, bcefjnzefh~ h j}nj~bqh~ ~hdtj ~z
pjt~hce#
Necnjlenbc9 nzecfh lh~ fevh~ fjl bcvjtj~efh ~jec bcj}envh~ h bcefjnzefh~, ~vj
phft ~hlbnbvet jl dlhuzjh fj lh~ fevh~, jcvjcfbcfh~j nhkh le bfjcvbabnenbc r
tj~jtqe fj fevh~ nhc jl abc fj bkpjfbt ~z vtevekbjcvh#
Hph~bnbc9 lh~ fevh~ ~jtc j}nlzbfh~ fjl vtevekbjcvh pht jl Tj~phc~edlj fjl
Abnmjth#
Nhkh nhcvtepetvbfe fj j~vh~ fjtjnmh~ le ljr nhcvjkple le hdlbgenbc fjl tj~phc~edlj fjl
abnmjth h vtevekbjcvh fj evjcfjt r aenblbvet jl jijtnbnbh fj j~vh~ fjtjnmh~ e lh~ vbvzletj~ fjlh~ fevh~#
Ch hd~vecvj, r ~jgc tjnhgj jl etv# 4> fj le LH_F, lh~ tj~phc~edlj~ fj lh~ abnmjth~ uzj
nhcvjcgec fevh~ zvblbyefh~ pete abcj~ phlbnbelj~ phftc fjcjget jl ennj~h, le tjnvbabnenbc
h necnjlenbc jc azcnbc fj lh~ pjlbgth~ uzj pzfbjtec fjtbqet~j pete le fjajc~e fjl
J~vefh h le ~jgztbfef pdlbne, le pthvjnnbc fj lh~ fjtjnmh~ r lbdjtvefj~ fj vjtnjth~ h le~
cjnj~bfefj~ fj le~ bcqj~vbgenbhcj~ uzj ~j j~vc tjelbyecfh#
J}b~vj le hdlbgenbc pete le~ Jcvbfefj~ fj fet bcahtkenbc e lh~ nbzfefech~ ~hdtj nkh
j~vh~ fjdjc jijtnjt ~z~ fjtjnmh~ ETNH# Jc j~vj ~jcvbfh, ~j fjdj aenblbvet el bcvjtj~efh
zc kjfbh ~jcnbllh r gtevzbvh pete kecbaj~vet ~z cjgevbqe el vtevekbjcvh fj lh~ fevh~ vel r
nhkh ~j tjnhgj fj ahtke k~ ekplbe jc lh~ etv~# 4: r 41 fjl TFLH_F#
Jl jijtnbnbh fj fjtjnmh~ j~v de~vecvj j}vjcfbfh jcvtj lh~ Erzcvekbjcvh~ r le~
Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ fhcfj jc zc 62,6* r zc :4,=* lh hvhtgec,
tj~pjnvbqekjcvj, e ~z~ bcvjtj~efh~# _ht vekeh fjl j~vtevh, le bkplecvenbc fj j~vj
fjdjt ~j tjelbye fj ahtke mjvjthgcje# Jl 5??* fj lh~ cnljh~ fj k~ :??#???
medbvecvj~ lh tjelbyec, ~jgzbfh~ pht lh~ fj phdlenbhcj~ fj :?#??? e 5??#??? medbvecvj~ r
lh~ fj 5??#??? e :??#??? medbvecvj~ fhcfj k~ fjl 7?* fj ~z~ ghdbjtch~ lh jajnvec-72,:* r 7:* tj~pjnvbqekjcvj"# Jl kjcht cbqjl fj nhdjtvzte ~j fe jc lh~ erzcvekbjcvh~
fj :#??? e 5?#??? medbvecvj~ fhcfj ~j tjelbye pht k~ fjl :?* fj lh~ ghdbjtch~#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 4> fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
24/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
= KJFBFE^ FJ ^JGZTBFEF
_ete jl nhttjnvh vtevekbjcvh fj lh~ fevh~ fj netnvjt pjt~hcel ~j fjdjc vjcjt jc nzjcvephlvbne~ j~pjnabne~ fj ~jgztbfef uzj getecvbnjc le ptbqenbfef fj lh~ kb~kh~# J~ve~ mec
fj vtefznbt~j, jc zce ~jtbj fj pthnjfbkbjcvh~ r nhcvthlj~ uzj ahtkec petvj fj lh~
tjuzjtbkbjcvh~ pete efepvet~j e le chtkevbqe fj pthvjnnbc fj fevh~ r uzj ~hc tjnhgbfh~
fjcvth fjl TFLH_F nhkh kjfbfe~ fj ~jgztbfef# Khvbqh j~vj, pht jl nzel fjdjc abgztet
jc jl fhnzkjcvh fj ~jgztbfef fj le jcvbfef#
E nhcvbczenbc, ~j ecelbye jl cbqjl fj nzkplbkbjcvh fj le~ kjfbfe~ fj ~jgztbfef j}bgbfe~
jc jl TFLH_F, nhkptjcfbjcfh lh~ nhcvthlj~ vecvh fj gj~vbc nhkh fj netnvjt vncbnh#
=#5 Kjfbfe~ fj ~jgztbfef nhc nhcvthlj~ fj netnvjt vncbnh
=#5#5 Tjgb~vth fj bcnbfjcnbe~
Zce bcnbfjcnbe j~ nzeluzbjt echkele uzj eajnvj h pzfbjte eajnvet e le bcvjgtbfef,
nhcabfjcnbelbfef h fb~phcbdblbfef fj lh~ fevh~ fj netnvjt pjt~hcel# Jl tj~phc~edlj fj
~jgztbfef fjdj ~jgc jl etv# 5?? fjl TFLH_F, kecvjcjt zc tjgb~vth fj bcnbfjcnbe~ pete
phfjt tjelbyet zc ~jgzbkbjcvh fj le tj~hlznbc fj le~ kb~ke~#
E pj~et fj lh j~vedljnbfh jc le chtkevbqe, le tjelbfef kzj~vte uzj lh tjelbyec zc 45,5* r
zc >=,2* fj Erzcvekbjcvh~ r Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~tj~pjnvbqekjcvj"# E cbqjl fj j~vtevh ~j tjelbye pht jl 15,:* erzcvekbjcvh~ fj gtecfj~
kzcbnbpbh~, jl >>,6* fj lh~ fj kjfbech~ r pht zc 5:,:* fj lh~ pjuzjh~ htgecb~kh~#
=#5#4 Bfjcvbabnenbc r ezvjcvbnenbc
Le~ jcvbfefj~ fjdjc j~vedljnjt nhcahtkj el etv# 2> fjl TFLH_F ntbvjtbh~ pete e~bgcet
fjtjnmh~ fj ennj~h fj lh~ vtedeiefhtj~ e lh~ ~b~vjke~ fj bcahtkenbc jc azcnbc fj ~z
fj~jkpjh, ~bjcfh bkphtvecvj uzj ~j tjqb~jc pjtbfbnekjcvj r envzelbnjc lh~ fjtjnmh~,
jc ne~h fj deie~ h nekdbh~#
Jl :6,7* fj lh~ Erzcvekbjcvh~ r jl 25,7* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~
Bc~zletj~ lh lljqec e nedh# _ht cbqjl fj j~vtevh lh tjelbyec, zc 2=,6* fj gtecfj~
kzcbnbpbh~, k~ fjl =5,1* fj vekeh kjfbech r zc 6>,:* pete le~ fj kjcht vekeh#
Jc nzeluzbjt ne~h jl TFLH_F, jc ~z etvnzlh 25 tjajtbfh el nhcvthl fj ennj~h, re ~jele
uzj jl tj~phc~edlj fjl abnmjth ~j jcnetget fj uzj j}b~ve zce tjlenbc envzelbyefe fj
z~zetbh~ r pjtablj~ fj z~zetbh~, r lh~ ennj~h~ ezvhtbyefh~ pete nefe zch fj jllh~# E cbqjl
glhdel le hdlbgevhtbjfef fj fb~phcjt jc ~z~ jcvbfefj~ zce lb~ve h tjlenbc fj z~zetbh~ j~
tjelbyefe pht zc >1,4* fj lh~ Erzcvekbjcvh~ r zc 77,=* fj le~ Fbpzvenbhcj~, Nhc~jll~ r
Nedblfh~ Bc~zletj~#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 46 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
25/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 4: fj :2
_ht hvte petvj, le~ JJ#LL# vbjcjc vekdbc le hdlbgevhtbjfef fj j~vedljnjt elgc pthnj~h fj
ezvjcvbnenbc h nhkpthdenbc fj le bfjcvbfef fjl z~zetbh# Jl z~h fj nhcvte~je~, fj
vetijve~ bcvjlbgjcvj~ h nhcvthlj~ dbhkvtbnh~ ~hc kjfbh~ fb~phcbdlj~ pete vel abc ~bjkptjuzj ~j gj~vbhcjc nhttjnvekjcvj5#
Ch hd~vecvj, le~ JJ#LL# fjdjc jc jl ne~h fj uzj ~j mere jljgbfh zc kvhfh fj
ezvjcvbnenbc pht nhcvte~je~, j~vedljnjt zce phlvbne uzj fjabce le ahtke fj e~bgcet r
nhkzcbnet, le ptbkjte qjy uzj ~j lj hvhtgzj e zc z~zetbh ~z ennj~h el ~b~vjke, e~ nhkh
~z tjchqenbc pjtbfbne# Fbnme kjfbfe re me ~bfh pzj~ve jc ketnme pht zc 1=,5* fj lh~
erzcvekbjcvh~ e cbqjl glhdel r pht zc =>,>* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~
Bc~zletj~#
Efjk~ j}b~vj hvte kjfbfe fj ~jgztbfef nhkh j~ jl nhcvthl fj lh~ bcvjcvh~ aellbfh~ fjennj~h pht petvj fj lh~ z~zetbh~ -etv# 5?> fjl TFLH_F"# J~ve ptnvbne me ~bfh pzj~ve jc
ketnme pht jl 61* fj lh~ Erzcvekbjcvh~ r pht zc 74,4* fj le~ Fbpzvenbhcj~, Nhc~jll~ r
Nedblfh~ Bc~zletj~# _ht vekeh fj j~vtevh ~j tjelbye fj ahtke mjvjthgcje pht le~
jcvbfefj~, fefh uzj jcvhtch el =?* fj lh~ htgecb~kh~ fj jcvtj :?#??? r :??#??? ~b lh
lljqec e nedh atjcvj el 11,7* fj lh~ kzcbnbpbh~ fj k~ fj :??#??? medbvecvj~#
Jc jl ne~h fj uzj le~ nhcvte~je~ ~j gzetfjc, fjdj menjt~j fj ahtke uzj ch ~jec
ljgbdlj~ pete jqbvet uzj zce pjt~hce ch ezvhtbyefe vjcge ennj~h e le~ kb~ke~ fj ahtke
atezfzljcve# J~ve ennbc le jajnvec jl 74,:* fj lh~ Erzcvekbjcvh~ r jl =>,>* fj le~Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~#
=#5#> Nhcvthl fj ennj~h
Jl fjtjnmh fj ennj~h, nhkh ~j mec bcfbnefh ecvjtbhtkjcvj, fjdj ~jt nhcnjfbfh jc
azcnbc fj lh~ tjnzt~h~ uzj ptjnb~jc lh~ z~zetbh~ fjl ~b~vjke pete jl fj~etthllh fj ~z~
azcnbhcj~, j~vecfh jl tj~phc~edlj fj ~jgztbfef hdlbgefh e getecvbyet j~vj nhcvthl -etv# 25
fjl TFLH_F"#
Jl eclb~b~ e cbqjl glhdel kzj~vte uzj jl 7?,6* fj lh~ Erzcvekbjcvh~ r jl 25,7* fj le~Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ eabtkec uzj nefe z~zetbh ennjfj e lh~ fevh~
cjnj~etbh~ nhcahtkj el pzj~vh uzj fj~jkpje jc le jcvbfef# Jc tjlenbc nhc le
j}b~vjcnbe fj lh~ nhcvthlj~ j~vh~ ~hc tjelbyefh~ pht zc 16,6* fj lh~ Erzcvekbjcvh~ r
=>,>* fj le~ Fbpzvenbhcj~#
Efjk~, j~vj fjtjnmh fjdj ~jt nhcnjfbfh ~lh pht uzbjc mere fj~bgcefh jl tj~phc~edlj
fjl abnmjth, ~bjcfh medbvzelkjcvj jl efkbcb~vtefht h efkbcb~vtefhtj~ fj lh~ ~b~vjke~ lh~
uzj kevjtbelbyec lh~ pjtkb~h~ fj ennj~h e lh~ ~b~vjke~ fj lh~ z~zetbh~# Le~ jcvbfefj~
5 BCVJNH# Tjnhkjcfenbhcj~ pete le ntjenbc r z~h fj nhcvte~je~ ~jgzte~# Fb~phcbdlj jcmvvp9((www#bcvjnh#j~(^jgztbfef(Hd~jtqevhtbh(J~vzfbh~XjXBcahtkj~(Chve~XrXEtvbnzlh~(tjnhkjcfenbhcj~XntjenbhcXz~hXnhcvte~jce~
http://www.inteco.es/Seguridad/Observatorio/Estudios_e_Informes/Notas_y_Articulos/recomendaciones_creacion_uso_contrasenashttp://www.inteco.es/Seguridad/Observatorio/Estudios_e_Informes/Notas_y_Articulos/recomendaciones_creacion_uso_contrasenashttp://www.inteco.es/Seguridad/Observatorio/Estudios_e_Informes/Notas_y_Articulos/recomendaciones_creacion_uso_contrasenashttp://www.inteco.es/Seguridad/Observatorio/Estudios_e_Informes/Notas_y_Articulos/recomendaciones_creacion_uso_contrasenas8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
26/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
fjdjc j~vedljnjt zc kjnecb~kh fj ezvhtbyenbhcj~ pete uzj jl efkbcb~vtefht nzjcvj nhc
le getecve ~zabnbjcvj fj uzj fjdj hvhtget jl ennj~h el z~zetbh uzj lh mere ~hlbnbvefh#
Fbnmh kjnecb~kh j~ j~vedljnbfh pht jl 7=* fj lh~ Erzcvekbjcvh~ r jl 26,6* fj le~Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~#
_ht lvbkh, e le mhte fj j~vedljnjt jl nhcvthl fj ennj~h, j~ bkphtvecvj uzj le zdbnenbc fj
lh~ ~b~vjke~ fj bcahtkenbc fj le~ jcvbfefj~ fb~phcge fj zc nhcvthl fj ennj~h a~bnh,
bkpbfbjcfh uzj nzeluzbjt pjt~hce ch ezvhtbyefe vjcge ennj~h r pzjfe tjelbyet nzeluzbjt
kecbpzlenbc atezfzljcve#
E cbqjl glhdel j~ tjelbyefh pht jl ::,1* fj lh~ Erzcvekbjcvh~ r jl 12,6* fj le~
Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~#
=#5#6 Tjgb~vth fj ennj~h~
Jcvtj le~ kjfbfe~ tjuzjtbfe~ pete lh~ abnmjth~ nle~babnefh~ nhkh cbqjl elvh, j~v jl
tjgb~vth fj ennj~h~, uzj bkplbne zc nhcvthl j}mez~vbqh pete nefe zch fj jllh~, fj
enzjtfh e lh uzj j~vedljnj jl etv# 5?> fjl TFLH_F, nepvztecfh le ~bgzbjcvj bcahtkenbc
fj nefe bcvjcvh fj ennj~h9
Bfjcvbabnenbc fjl z~zetbh#
Ajnme r mhte jc le uzj ~j tjelby#
Abnmjth ennjfbfh#
Vbph fj ennj~h9 nhc~zlve, khfbabnenbc, dhttefh, jvn#
^b me ~bfh ezvhtbyefh h fjcjgefh jl ennj~h#
Tjgb~vth nhcntjvh ennjfbfh9 jc jl ne~h fj uzj jl ennj~h mzdbj~j ~bfh ezvhtbyefh#
E cbqjl glhdel, zc 67,7* fj lh~ Erzcvekbjcvh~ r zc >1,5* fj le~ Fbpzvenbhcj~, Nhc~jll~
r Nedblfh~ Bc~zletj~ lljqec e nedh zc tjgb~vth fj ennj~h#
Hvth~ jljkjcvh~ uzj le~ jcvbfefj~ mec fj vjcjt jc nzjcve tj~pjnvh e lh~ tjgb~vth~ fj
ennj~h ~hc9
Jl pjtbhfh fj nhc~jtqenbc, czcne ~zpjtbht e fh~ eh~, r jl nhcvthl fj lh~
tjgb~vth~ kjfbecvj le jkb~bc fj zc bcahtkj kjc~zel -etv# 5?>#6 fjl TFLH_F"# Jl
cbqjl fj nzkplbkbjcvh e cbqjl glhdel j~ fj zc 14,5* jc lh~ Erzcvekbjcvh~ r fj zc
67,4* jc le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~#
Le jledhtenbc, nhc netnvjt kjc~zel, fj zc bcahtkj fj le~ tjqb~bhcj~ tjelbyefe~,
fj lh~ pthdljke~ fjvjnvefh~ pht petvj fjl tj~phc~edlj fj ~jgztbfef -etv# 5?>#:
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 41 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
27/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
fjl TFLH_F"# J~vh j~ nzkplbfh pht jl 41,1* fj lh~ Erzcvekbjcvh~ r jl 5>,2* fj
le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ e cbqjl glhdel#
=#5#: Vjljnhkzcbnenbhcj~
Jl TFLH_F j}bgj jc ~z etv# 5?6, pete fevh~ pjt~hcelj~ nle~babnefh~ nhkh cbqjl elvh, le
bkplecvenbc fj nhcvthlj~ uzj getecvbnjc le nhcabfjcnbelbfef r le bcvjgtbfef jc le~
vtec~kb~bhcj~ e vteq~ fj tjfj~ pdlbne~ h tjfj~ bcelkdtbne~ fj nhkzcbnenbhcj~
jljnvtcbne~# _ete jllh ~j j~vedljnj, nhkh kjnecb~kh k~ medbvzel, jl nbatefh fj lh~
fevh~, fefh uzj getecvbye uzj le bcahtkenbc ch ~jt bcvjlbgbdlj cb kecbpzlefe pht
vjtnjth~#
Fbnmh nbatefh j~ tjelbyefh e cbqjl glhdel pht jl 61,=* r jl :=,>* fj lh~ Erzcvekbjcvh~ r
fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ tj~pjnvbqekjcvj#
=#4 Kjfbfe~ fj ~jgztbfef nhc nhcvthlj~ fj gj~vbc
=#4#5 Gj~vbc fj ~hphtvj~ r fhnzkjcvh~
Jl tj~phc~edlj fj ~jgztbfef vbjcj le hdlbgenbc fj tjelbyet zce gj~vbc jajnvbqe fj lh~
~hphtvj~ uzj j}b~vec jc le Jcvbfef, nhcahtkj e lh j~vedljnbfh jc jl etv# 24 fjl TFLH_F,
pete lh nzel ~j j~vedljnjc zce ~jtbj fj kjfbfe~ jcahnefe~ e9
Le bfjcvbabnenbc fjl vbph fj bcahtkenbc uzj nhcvbjcjc lh~ ~hphtvj~ r fhnzkjcvh~uzj nhcvjcgec fevh~ fj netnvjt pjt~hcel -etv# 24#5 TFLH_F", e~ nhkh ~jt
bcqjcvetbefh~ r ennj~bdlj~ pht jl pjt~hcel ezvhtbyefh pete jllh jc jl fhnzkjcvh
fj ~jgztbfef# Le j}njpnbc e j~ve kjfbfe, qbjcj j~vedljnbfe nzecfh le~
netenvjt~vbne~ a~bne~ fjl ~hphtvj bkph~bdblbvjc ~z nzkplbkbjcvh, fjdbjcfh fjiet
nhc~vecnbe khvbqefe fj jllh jc jl fhnzkjcvh fj ~jgztbfef# Jl gtefh fj
bkplecvenbc fj j~vh~ tjuzb~bvh~ j~ tjelbyefh fj kecjte fj~bgzel# E~9
h Le bfjcvbabnenbc j~ tjelbyefe pht jl :=,>* fj lh~ Erzcvekbjcvh~ e cbqjl
glhdel r pht jl 74,4* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~#
h Jl bcqjcvetbefh ~j jajnve pht jl 44,1* fj lh~ Erzcvekbjcvh~ r jl 66,6*
fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~#
h _ht lvbkh, le ennj~bdblbfef fj lh~ ~hphtvj~ r fhnzkjcvh~, uzj j~ve jc
tjlenbc nhc jl ennj~h tj~vtbcgbfh el ~bvbh fhcfj ~j elkenjcec, j~
jijnzvefe pht jl 16,=* fj lh~ Erzcvekbjcvh~ r jl 12,6* fj le~
Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~#
Le ezvhtbyenbc pht jl tj~phc~edlj fjl abnmjth h le ezvhtbyenbc qe fhnzkjcvh fj~jgztbfef fj le ~elbfe fj ~hphtvj~ r fhnzkjcvh~ uzj nhcvjcgec fevh~ fj netnvjt
pjt~hcel, bcnlzbfh~ lh~ nhkptjcfbfh~ r(h eijch~ e zc nhttjh jljnvtcbnh, azjte fj
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 47 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
28/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 4= fj :2
lh~ lhnelj~ r deih jl nhcvthl fjl tj~phc~edlj fjl abnmjth h vtevekbjcvh -etv# 24#4
TFLH_F"# Nhkpljkjcvetbekjcvj e j~ve fb~ph~bnbc, jl etv# 24#> fjl TFLH_F
j~vedljnj uzj nzecfh ~j qere e pthnjfjt el vte~lefh fj le fhnzkjcvenbc ~jfjdjc efhpvet kjfbfe~ pete jqbvet le ~z~vtennbc, ptfbfe h ennj~h bcfjdbfh e le
bcahtkenbc fztecvj ~z vtec~phtvj#
E cbqjl glhdel, jl nhcvthl fj le ~elbfe r jcvtefe fj ~hphtvj~ j~ tjelbyefh pht jl
5=,6* fj lh~ Erzcvekbjcvh~ r pht zc >?,1* fj le~ Fbpzvenbhcj~, Nhc~jll~ r
Nedblfh~ Bc~zletj~# Le ezvhtbyenbc pht petvj fjl tj~phc~edlj fj ~jgztbfef j~
jajnvzef pht jl :1* fj lh~ Erzcvekbjcvh~ r jl :4,=* fj le~ Fbpzvenbhcj~,
Nhc~jll~ r Nedblfh~ Bc~zletj~#
_ht vekeh fj j~vtevh j}b~vj zce fb~petbfef jc le e~zcnbc fj j~ve~hdlbgevhtbjfefj~, kbjcvte~ uzj jl phtnjcveij fj Erzcvekbjcvh~ fj gtecfj~
kzcbnbpbh~ j~ ~zpjtbht el 66* jc jl nhcvthl r el 7?* jc le ezvhtbyenbc, jc jl ne~h
fj lh~ htgecb~kh~ fj kjfbech r pjuzjh vekeh, jl phtnjcveij fj lh~ uzj
nzkpljc ~j epth}bke el qelht glhdel#
Jl eclb~b~ ptjqbh fj le~ cjnj~bfefj~ fjl ~hphtvj h fjl fhnzkjcvh uzj nhcvjcge
fevh~ fj netnvjt pjt~hcel ecvj~ fj fj~jnmetlh pete jqbvet jl ennj~h e le
bcahtkenbc nhcvjcbfe jc jl kb~kh h ~z tjnzpjtenbc ph~vjtbht -etv# 24#6 fjl
TFLH_F"# J~ve kjfbfe ~ztgj ecvj lh~ ph~bdlj~ tbj~gh~ nhc lh~ uzj ~j pzjfjcjcnhcvtet le~ jcvbfefj~ nzecfh ~j fj~menjc fj fb~ph~bvbqh~ ~bc medjt~j
e~jgztefh fj medjt jlbkbcefh vhfe le bcahtkenbc4#
_tjgzcvefe~ le~ jcvbfefj~ el jajnvh, le tj~pzj~ve e cbqjl glhdel me ~bfh uzj jl
>2,1* fj lh~ Erzcvekbjcvh~ r jl >1,5* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~
Bc~zletj~ jijnzvec kjfbfe~ pete bkpjfbt le tjnzpjtenbc bcfjdbfe fj le
bcahtkenbc#
Le bfjcvbabnenbc, gj~vbc r fb~vtbdznbc fj lh~ ~hphtvj~ r jl vtevekbjcvh jc
fb~ph~bvbqh~ phtvvblj~ -etv# 5?5 fjl TFLH_F"# Tj~pjnvh e j~vh~ lvbkh~, le
chtkevbqe j~vedljnj uzj fjdjt jqbvet~j jl z~h fj euzjllh~ uzj ch pjtkbvec ~z
nbatefh r, jc jl ne~h fj uzj ~je j~vtbnvekjcvj cjnj~etbh, ~j met nhc~vet,
khvbqefekjcvj, jc jl fhnzkjcvh fj ~jgztbfef r ~j efhpvetc kjfbfe~ uzj
vjcgec jc nzjcve lh~ tbj~gh~ fj tjelbyet vtevekbjcvh~ jc jcvhtch~ fj~pthvjgbfh~#
E cbqjl glhdel, jl nzkplbkbjcvh fj j~ve~ ptjtthgevbqe~ pht le~ jcvbfefj~ j~ ~bkblet
fefh uzj, jl >7,>* fj lh~ Erzcvekbjcvh~ r jl >1,5* fj le~ Fbpzvenbhcj~,
4 BCVJNH# Tjzvblbyenbc r ~z~vbvznbc ~jgzte fj fb~ph~bvbqh~ fj elkenjcekbjcvh# Fb~phcbdlj jcmvvp9((www#bcvjnh#j~(^jgztbfef(Hd~jtqevhtbh(J~vzfbh~XjXBcahtkj~(Chve~XrXEtvbnzlh~(TjzvblbyenbhcXrX~z~vbvznbhcX~jgzteXfjXfb~ph~bvbX55
http://www.inteco.es/Seguridad/Observatorio/Estudios_e_Informes/Notas_y_Articulos/Reutilizacion_y_sustitucion_segura_de_dispositi_11http://www.inteco.es/Seguridad/Observatorio/Estudios_e_Informes/Notas_y_Articulos/Reutilizacion_y_sustitucion_segura_de_dispositi_11http://www.inteco.es/Seguridad/Observatorio/Estudios_e_Informes/Notas_y_Articulos/Reutilizacion_y_sustitucion_segura_de_dispositi_11http://www.inteco.es/Seguridad/Observatorio/Estudios_e_Informes/Notas_y_Articulos/Reutilizacion_y_sustitucion_segura_de_dispositi_118/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
29/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
Nhc~jll~ r Nedblfh~ Bc~zletj~ eabtkec nbatet lh~ fevh~ nhcvjcbfh~ jc lh~ ~hphtvj~
uzj ~eljc fj le~ bc~velenbhcj~ fj le jcvbfef#
=#4#4 Nhpbe~ fj tj~pelfh r tjnzpjtenbc
J~ ntvbnh getecvbyet le nhcvbczbfef fj le~ envbqbfefj~ fj le JJ#LL#, pete lh uzj ~j fjdj
e~jgztet le fb~phcbdblbfef fj lh~ fevh~ uzj ~j vtevec# Le~ nhpbe~ fj ~jgztbfef h fj
tj~pelfh, pthnztec j~vj hdijvbqh, jkpljcfh~j pete le tjnzpjtenbc fj lh~ fevh~
htbgbcelj~ jc ne~h fj ptfbfe h elvjtenbc bcfjdbfe# Le chtkevbqe j~vedljnj zce ~jtbj fj
kjfbfe~ e lljqet e nedh9
Le tjelbyenbc, nhkh kcbkh ~jkecel, fj nhpbe~ fj tj~pelfh, ~elqh uzj jc fbnmh
pjthfh ch ~j mzdbjte pthfznbfh cbcgzce envzelbyenbc fj lh~ fevh~ -etv# 26#5 fjl
TFLH_F"# J~ve ennbc ~j tjelbye, e cbqjl glhdel, pht jl ::,4* fj lh~
Erzcvekbjcvh~ r k~ fjl 2?*, jc nhcntjvh 26,6*, fj le~ Fbpzvenbhcj~, Nhc~jll~
r Nedblfh~ Bc~zletj~#
Jl j~vedljnbkbjcvh fj pthnjfbkbjcvh~ pete le tjnzpjtenbc fj lh~ fevh~ uzj
getecvbnjc, jc vhfh khkjcvh, ~z tjnhc~vtznnbc el j~vefh jc uzj ~j jcnhcvtedec
el vbjkph fj pthfznbt~j le ptfbfe h fj~vtznnbc -etv# 26#4 fjl TFLH_F"# Nhc le
j}njpnbc fj uzj ~b eajnve~j e abnmjth~ h vtevekbjcvh~ petnbelkjcvj
ezvhkevbyefh~ r ~bjkptj uzj le j}b~vjcnbe fj le fhnzkjcvenbc pjtkbve le
tjnzpjtenbc, ~j fjdjt pthnjfjt e gtedet keczelkjcvj lh~ fevh~ fjiecfhnhc~vecnbe khvbqefe fj j~vj mjnmh jc jl fhnzkjcvh fj ~jgztbfef# Jcvtj le~
JJ#LL#, jl :4,=* fj lh~ Erzcvekbjcvh~ r jl ==,2* fj le~ Fbpzvenbhcj~, Nhc~jll~ r
Nedblfh~ Bc~zletj~ getecvbyec le tjnhc~vtznnbc fj lh~ fevh~#
Le qjtbabnenbc nefe ~jb~ kj~j~ pht jl tj~phc~edlj fjl abnmjth fj uzj ~j tjelbye
zce nhttjnve fjabcbnbc, azcnbhcekbjcvh r eplbnenbc fj lh~ pthnjfbkbjcvh~ fj
tjelbyenbc fj nhpbe~ fj tj~pelfh r fj tjnzpjtenbc fj fevh~ -etv# 26#> fjl
TFLH_F"# J~ve kjfbfe ~j tjelbye pht le kerhte fj lh~ kzcbnbpbh~ nhc
bcfjpjcfjcnbe fj ~z vekeh, ~elqh jc jl ne~h fj lh~ Erzcvekbjcvh~ fj :#??? e5?#??? medbvecvj~ fhcfj jl phtnjcveij fj jcvbfefj~ ~j epth}bke el fj le~
Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ -1=*"#
Ch hd~vecvj, j~ve kjfbfe vekdbc ~zphcj uzj jl tj~phc~edlj fjl abnmjth9
h Ezvhtbnj pht j~ntbvh le tjnzpjtenbc fj lh~ fevh~# Jcvtj le~ JJ#LL# j~ve
ennbc ch j~v lh ~zabnbjcvjkjcvj bkpljkjcvefe re uzj jl kerht gtefh fj
nhdjtvzte ~j ~bve jc jl 66* pete lh~ kzcbnbpbh~ fj 5??#??? e :??#???
medbvecvj~# _ete jl tj~vh fj j~vtevh~ ~j jcnzjcvte pht fjdeih fjl >>,>*,
bcnlzbfe~ le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ uzj lljgec el
4:* fj nhdjtvzte#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce 42 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
30/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
h Kecvjcge zc tjgb~vth nhc vhfe~ le~ tj~veztenbhcj~ uzj ~j tjelbnjc# J~vj
fjdj nhcvjcjt le ~bgzbjcvj bcahtkenbc9 ajnme r mhte, pjt~hce uzj tjelbye
le tj~veztenbc r lh~ fevh~ uzj ~j tj~veztec fj ahtke keczel -pht ch j~vetbcnlzbfh~ jc le nhpbe fj tj~pelfh"# Tj~pjnvh el tjgb~vth, jl gtefh fj
bkplecvenbc j~ kerht, nhc zc 5??* fj lh~ kzcbnbpbh~ fj k~ fj :??#???
medbvecvj~ r fjl :5* pete lh~ fj k~ fj :?#??? medbvecvj~# Jl tj~vh fj
j~vtevh~ qete jcvhtch el 4:* fj htgecb~kh~ uzj nzkpljc nhc lh
j~vedljnbfh jc le chtkevbqe, kjch~ jc jl ne~h fj lh~ kzcbnbpbh~ fj jcvtj
5?#??? r :?#??? medbvecvj~ ->:,7*"#
Le nhc~jtqenbc fj zce nhpbe fj tj~pelfh fj lh~ fevh~ r fj lh~ pthnjfbkbjcvh~ fj
tjnzpjtenbc fj lh~ kb~kh~ jc zc lzget fbajtjcvj fj euzjl jc uzj ~j jcnzjcvtjclh~ juzbph~ bcahtkvbnh~ uzj lh~ vtevec, pete euzjllh~ fevh~ pjt~hcelj~ fj cbqjl
elvh -etv# 5?4 fjl TFLHF_"# J~ve hdlbgenbc j~ nzkplbfe pht jl 16,:* fj lh~
Erzcvekbjcvh~ r jl 11,7* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~# Ch
hd~vecvj, e cbqjl fjl vekeh fj lh~ kzcbnbpbh~, jl nzkplbkbjcvh j~ ~zpjtbht e
j~vh~ phtnjcveij~ jc lh~ fj k~ fj 5?#??? medbvecvj~#
=#4#> _tzjde~ nhc fevh~ tjelj~
Jl TFLH_F j~vedljnj jc ~z etv# 26#6 uzj le~ ptzjde~ ptjqbe~ e le bkplecvenbc h
khfbabnenbc fj lh~ ~b~vjke~ fj bcahtkenbc uzj vtevjc abnmjth~ nhc fevh~ fj netnvjt
pjt~hcel ch ~j tjelbyetc nhc fevh~ tjelj~, ~elqh uzj9
^j e~jgztj jl cbqjl fj ~jgztbfef nhttj~phcfbjcvj el vtevekbjcvh tjelbyefh#
^j echvj ~z tjelbyenbc jc jl fhnzkjcvh fj ~jgztbfef#
^j tjelbnj zce nhpbe fj ~jgztbfef#
Le tj~pzj~ve fj le~ jcvbfefj~ petvbnbpecvj~ jc jl j~vzfbh kzj~vte uzj, e cbqjl glhdel, jl
1?* fj lh~ Erzcvekbjcvh~ r jl :=,>* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~
eabtkec uzj le~ ptzjde~ ch ~j tjelbyec nhc fevh~ tjelj~ atjcvj e zc 4:* r e zc 47,=*
tj~pjnvbqekjcvj uzj ~b lh~ zvblbyec#
Jc nzeluzbjt ne~h, le chtkevbqe tjnhkbjcfe jl z~h fj fevh~ abnvbnbh~ pete ch vjcjt uzj
efhpvet nhcvthlj~ fj ~jgztbfef efbnbhcelj~, r uzj ~j zvblbnjc le~ kb~ke~ kjfbfe~ fj
~jgztbfef uzj ~j eplbnetc ~b lh~ fevh~ azj~jc tjelj~# Fbnme ptjneznbc j~ vhkefe jc
nhc~bfjtenbc pht zc :4,4* fj lh~ Erzcvekbjcvh~ r zc :4,=* fj le~ Fbpzvenbhcj~,
Nhc~jll~ r Nedblfh~ Bc~zletj~#
=#4#6 EzfbvhteLh~ ~b~vjke~ fj bcahtkenbc j bc~velenbhcj~ fj vtevekbjcvh r elkenjcekbjcvh fj fevh~
uzj kecjijc fevh~ fj cbqjl kjfbh fj ~jgztbfef, mec fj ~hkjvjt~j ~jgc j~vedljnj jl
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce >? fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
31/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
etv# 21 fjl TFLH_F e zce ezfbvhte bcvjtce h j}vjtce, el kjch~ nefe fh~ eh~, uzj
qjtbabuzj jl nzkplbkbjcvh fj le~ kjfbfe~ fj ~jgztbfef#
E cbqjl glhdel, fbnme~ ezfbvhtbe~ ~hc tjelbyefe~ pht jl 5?,2* fj lh~ Erzcvekbjcvh~ r jl
52,6* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~#
Ch hd~vecvj, fbnme ezfbvhte fjdjt tjelbyet~j nhc netnvjt j}vtehtfbcetbh ~bjkptj uzj ~j
tjelbnjc khfbabnenbhcj~ ~z~vecnbelj~ jc jl ~b~vjke fj bcahtkenbc uzj pzjfec tjpjtnzvbt
jc jl nzkplbkbjcvh fj le~ kjfbfe~ bkplecvefe~ nhc jl hdijvbqh fj qjtbabnet le efepvenbc,
efjnzenbc r jabnenbe fj le~ kb~ke~#
Vte~ jl pthnj~h fj ezfbvhte ~j fjdjt tjelbyet zc bcahtkj uzj me fj nzkplbt nhc lh~
~bgzbjcvj~ hdijvbqh~9
Fbnvekbcet ~hdtj le efjnzenbc fj le~ kjfbfe~ r nhcvthlj~ e le Ljr r ~z
fj~etthllh tjglekjcvetbh#
Bfjcvbabnet le~ fjabnbjcnbe~ uzj pzjfec nhcvjcjt lh~ ~b~vjke~ fj bcahtkenbc r le~
bc~velenbhcj~#
_thphcjt le~ kjfbfe~ nhttjnvhte~ h nhkpljkjcvetbe~ cjnj~etbe~#
Bcnlzbt lh~ fevh~, mjnmh~ r hd~jtqenbhcj~ jc uzj ~j de~jc lh~ fbnvkjcj~elnecyefh~ r le~ tjnhkjcfenbhcj~ pthpzj~ve~#
Fbnmh bcahtkj j~ tjelbyefh pht jl 5>,2* fj lh~ Erzcvekbjcvh~ r jl >>,>* fj le~
Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~# _ht vekeh fjl j~vtevh, ~j nzkplj pht jl
:?,=* fj lh~ Erzcvekbjcvh~ fj gtecfj~ kzcbnbpbh~, jl 47,2* fj lh~ fj kjfbech~
kzcbnbpbh~ r 7,7* fj lh~ fj kjcht vekeh#
_ht lvbkh, le chtkevbqe j~vedljnj uzj lh~ bcahtkj~ fj ezfbvhte mec fj ~jt ecelbyefh~
pht jl tj~phc~edlj fj ~jgztbfef nhkpjvjcvj, uzj jljqet le~ nhcnlz~bhcj~ el
tj~phc~edlj fjl abnmjth h vtevekbjcvh pete uzj efhpvj le~ kjfbfe~ nhttjnvhte~
efjnzefe~ r uzjfetc e fb~ph~bnbc fj le Egjcnbe J~pehle fj _thvjnnbc fj Fevh~ h,
jc ~z ne~h, fj le~ ezvhtbfefj~ fj nhcvthl fj le~ nhkzcbfefj~ ezvchke~#
E cbqjl glhdel, zc 45,1* fj lh~ Erzcvekbjcvh~ r zc 52,6* fj le~ Fbpzvenbhcj~, Nhc~jll~
r Nedblfh~ Bc~zletj~ lh lljqec e nedh0 ezcuzj e cbqjl fj j~vtevh ~j tjelbye pht jl >2* fj
lh~ Erzcvekbjcvh~ fj gtecfj~ kzcbnbpbh~ r pht jl 4?,:* fj lh~ fj kjfbech vekeh#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce >5 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
32/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
2 ^Z_JTQB^BC, BC^_JNNBHCJ^, FJCZCNBE^ R
^ECNBHCJ^ FJTBQEFE^ FJL BCNZK_LBKBJCVH FJLE CHTKEVBQE FJ _THVJNNBC FJ FEVH^
Le~ Egjcnbe~ fj _thvjnnbc fj Fevh~, vecvh le j~vevel nhkh ezvhckbne~, vbjcjc
evtbdzbfe~, pht ljr, nhkpjvjcnbe~ jc kevjtbe ~ecnbhcefhte#
Jl pthnjfbkbjcvh ~ecnbhcefht, fj nhcahtkbfef nhc lh ptjqb~vh jc jl etvnzlh 6=#5 fj le
LH_F, j~v tjgzlefh jc jl Tjel Fjntjvh 5>>4(5226, fj 4? fj izcbh, uzj fjvelle jl neznj
e ~jgzbt pete le fjvjtkbcenbc fj le~ bcatennbhcj~ r le bkph~bnbc fj ~ecnbhcj~#
Jc jl ne~h fj le~ Efkbcb~vtenbhcj~ _dlbne~, ~jgc jl etv# 6>#4 fj le LH_F, ~j j~vet, jc
nzecvh el pthnjfbkbjcvh r le~ ~ecnbhcj~, e lh fb~pzj~vh jc jl etv# 61 uzj j~vedljnj le~
bcatennbhcj~ fj j~ve~ jcvbfefj~#
J~vj epetvefh ecelbye, jl qhlzkjc fj JJ#LL# uzj ~j mec qb~vh eajnvefe~ pht zce
bc~pjnnbc fj le EJ_F, jl cbqjl fj nhchnbkbjcvh tj~pjnvh e le~ ~ecnbhcj~ e le~ uzj
pzjfjc qjt~j ~hkjvbfh~ lh~ htgecb~kh~, nhkh nhc~jnzjcnbe fj zc bcnzkplbkbjcvh fj le
chtkevbqe fj pthvjnnbc fj fevh~, r ~b mec ~zatbfh elgzce ~ecnbc#
2#5 Bc~pjnnbhcj~E cbqjl glhdel, jl =2,4* fj lh~ Erzcvekbjcvh~ r jl =?,1* fj le~ Fbpzvenbhcj~, Nhc~jll~ r
Nedblfh~ Bc~zletj~ eabtkec ch medjt ~zatbfh cbcgzce bc~pjnnbc pht petvj fj le~ Egjcnbe~
fj _thvjnnbc fj Fevh~# ^bc jkdetgh, vhfh~ lh~ Erzcvekbjcvh~ fj k~ :??#???
medbvecvj~ petvbnbpecvj~ jc jl j~vzfbh mec ~zatbfh elgzce bc~pjnnbc0 nbtnzc~vecnbe j~ve
uzj j~ j}plbnedlj fefh jl jljqefh qhlzkjc fj fevh~ r abnmjth~ uzj gj~vbhcec# Fj~vene
uzj lh~ erzcvekbjcvh~ fj :#??? e 5?#??? eabtkec ch medjt tjnbdbfh cbcgzce bc~pjnnbc#
2#4 Fjczcnbe~ r ~ecnbhcj~
Le~ jcvbfefj~ petvbnbpecvj~ jc jl ptj~jcvj j~vzfbh mec ~bfh ptjgzcvefe~ enjtne fj ~b
vbjcjc nhchnbkbjcvh fj le~ ~ecnbhcj~ uzj pzjfj bkphcjt le Egjcnbe J~pehle fj
_thvjnnbc fj Fevh~ r ~b mec ~zatbfh elgzce ~ecnbc#
Jl >4,5* fj lh~ Erzcvekbjcvh~ r jl 12,6* fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~
Bc~zletj~ eabtkec nhchnjtle# _ht vekeh fjl j~vtevh j~vj nhchnbkbjcvh j~ fj zc =?,=*
pete lh~ erzcvekbjcvh~ fj lh~ gtecfj~ kzcbnbpbh~, zc :?,>* pete lh~ kjfbech~ r zc
46,5* pete lh~ fj kjcht vekeh#
Jc tjlenbc nhc le ~jgzcfe ptjgzcve, j~vh j~, ~b mec ~zatbfh elgzce ~ecnbc, jl 4,2* fjlh~ Erzcvekbjcvh~, e cbqjl glhdel, eabtke medjtle ~zatbfh atjcvj e zc 2:,7* uzj ch lh me
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce >4 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
33/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
mjnmh# Jc jl ne~h fj le~ Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~ zc 25,7* fj jlle~
ch me ~zatbfh ~ecnbc r jl tj~vh eabtke fj~nhchnjtlh#
Jl bkphtvj fj le~ ~ecnbhcj~ j~ qetbedlj# Fj~fj lh~ 1?? me~ve lh 1?#???, jc jl ne~h fj
le~ bcatennbhcj~ ljqj~, e lh~ bcvjtqelh~ fj 1?#5?5,45 r lh~ 5=?#5?5,45, pete le~ gteqj~,
me~ve lljget e le~ kzr gteqj~ nhc bkphtvj~ uzj ~j ~bvec jcvtj lh~ >??#:?1,?:+
1?4#456,54# Jcvtj lh~ ~zpzj~vh~ uzj ~jele le chtkevbqe pete nefe zce fj le~
~ecnbhcj~ ~j jcnzjcvtec lh~ ~bgzbjcvj~9
Bcatennbhcj~ ljqj~9 fj~evjcfjt le ~hlbnbvzf fjl bcvjtj~efh fj necnjlet ~z~ fevh~
pjt~hcelj~, ch ~hlbnbvet le bc~ntbpnbc fjl abnmjth fj fevh~ fj netnvjt pjt~hcel jc
jl Tjgb~vth Gjcjtel fj _thvjnnbc fj Fevh~, h ch nzkplbt jl fjdjt fj bcahtkenbc
el tjnedet lh~ fevh~ pjt~hcelj~ uzj j~vedljnj jl etv# : fj le LH_F#
Bcatennbhcj~ gteqj~9 ntjet abnmjth~ fj vbvzletbfef pdlbne h bcbnbet le tjnhgbfe fj
fevh~ fj netnvjt pjt~hcel ~bc ezvhtbyenbc fj fb~ph~bnbc gjcjtel pzdlbnefe jc jl
Dhljvc Habnbel fjl J~vefh h fbetbh habnbel nhttj~phcfbjcvj#
Bcatennbhcj~ kzr gteqj~9 nhkzcbnet h njfjt fevh~ azjte fj lh~ ~zpzj~vh~
pjtkbvbfh~, h tjnedet r vtevet lh~ fevh~ ~bc jl nhc~jcvbkbjcvh fjl eajnvefh, vel r
nhkh qbjcj j~vedljnbfh jc jl etv# 6: TFLH_F#
E cbqjl glhdel, jcvhtch el >=* fj le~ jcvbfefj~ eabtkec medjt ~zatbfh elgzce fj le~
~ecnbhcj~ uzj le chtkevbqe j~vedljnj0 jc nhcntjvh jl >=,1* ~ecnbhcj~ ljqj~, jl >=,5* fj
JJ#LL# ~ecnbhcj~ gteqj~ r kzr gteqj~# Jc jl ne~h fj le~ Fbpzvenbhcj~, Nhc~jll~ r
Nedblfh~ Bc~zletj~ jl phtnjcveij fj jcvbfefj~ pete vhfe~ le~ ~ecnbhcj~ j~ jl kb~kh
->=,2*"#
_ht lvbkh, r jc tjlenbc nhc jl nhchnbkbjcvh fj le~ ~ecnbhcj~ pht petvj fj le~ jcvbfefj~,
nedj ~jelet uzj ~vj j~ pthgtj~bqh ~jgc jl vekeh fj le kb~ke# Fj j~ve ahtke, ~j
pzjfj nhkpthdet uzj le~ ~ecnbhcj~ uzj ptjfhkbcec jcvtj lh~ erzcvekbjcvh~ fj
kzcbnbpbh~ gtecfj~ ~hc le~ gteqj~ -:4,6*", ~jgzbfe~ fj le~ ljqj~ -:?,7*" r pht lvbkhle~ kzr gteqj~ -62,>*"# Jcvtj lh~ erzcvekbjcvh~ fj kjfbech~ kzcbnbpbh~, le~ ~ecnbhcj~
k~ bkpzj~ve~ ~hc le~ kzr gteqj~ -6:,=*", ~jgzbfe~ fj le~ ~ecnbhcj~ ljqj~ -6:,4*" r
pht lvbkh le~ gteqj~, jl 6:* fj lh~ kzcbnbpbh~ e~ lh eabtkec#
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce >> fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
34/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
5? LE H_BCBC FJ LH^ J]_JTVH^ TJ^_JNVH EL
GTEFH FJ EFE_VENBC J BK_LECVENBC FJ LECHTKEVBQE
Jc j~vj nepvzlh ~j tjnhgj le hpbcbc fj j}pjtvh~ jc le kevjtbe nhc jl abc fj j~vedljnjt zc
ketnh fj eclb~b~ uzj ephtvj czjqe~ pjt~pjnvbqe~ r ~jelj czjqe~ vjcfjcnbe~ fj
envzenbc tj~pjnvh fjl gtefh fj efepvenbc j bkplecvenbc fj le chtkevbqe jc pthvjnnbc
fj fevh~ pht petvj fj le~ JJ#LL#
Le ~jljnnbc fj lh~ j}pjtvh~ ~j tjelby e petvbt fj zch~ kdbvh~ fj tjptj~jcvevbqbfef r fj
pjtablj~ pthaj~bhcelj~ uzj pjtkbvbjte getecvbyet jl jcahuzj bcvjgtel r le nhdjtvzte fjfbajtjcvj~ pzcvh~ fj qb~ve9
J}pjtbjcnbe fj gj~vbc r(h vncbne jc jl kdbvh fj le~ jcvbfefj~ pdlbne~#
J~pjnbelbyenbc jc pthvjnnbc fj fevh~#
Tj~phc~edblbfef jc le plecbabnenbc r gj~vbc fj lh~ ~b~vjke~ fj bcahtkenbc r
nhkzcbnenbhcj~#
Tjptj~jcvevbqbfef jc lh~ fb~vbcvh~ cbqjlj~ fj le~ Jcvbfefj~ _dlbne~ Lhnelj~, re~jec Erzcvekbjcvh~, Fbpzvenbhcj~, Nhc~jll~ r Nedblfh~ Bc~zletj~#
Jc j~vj ~jcvbfh, jl gtzph fj j}pjtvh~ me j~vefh nhkpzj~vh pht tj~phc~edlj~ fj le~
tje~ fj~ntbve~ fj 46 Jcvbfefj~ _dlbne~ Lhnelj~ uzj tjptj~jcvec Erzcvekbjcvh~ fj
fb~vbcvh vekeh r gjhgteae, e~ nhkh Fbpzvenbhcj~ r Nedblfh~ Bc~zletj~# ^j me ~hlbnbvefh
vekdbc le nhledhtenbc fj le Egjcnbe J~pehle fj _thvjnnbc fj Fevh~ r fj le~ vtj~
Egjcnbe~ Ezvhckbne~ uzj j}b~vjc envzelkjcvj9 Nhkzcbfef fj Keftbf, Nevelze r _e~
Qe~nh, e~ nhkh le nhledhtenbc fj pthaj~bhcelj~ bcfjpjcfbjcvj~#
Nhc le bcahtkenbc tjnhgbfe fj j~ve hpbcbc nzelbabnefe ~j jledhte jl ptj~jcvj jpgteajnhcvjcbjcfh jl eclb~b~ fjvellefh fj9
Le fjabcbnbc fj lh~ cbqjlj~ fj kefztjy jc le bkplecvenbc fj le~ kjfbfe~ fj
~jgztbfef, nhkh mjttekbjcve fj ~jljnnbc fj ptbhtbfefj~ jc le ae~j bcbnbel fj
efepvenbc e le Ljr# E~, ~j mec fjabcbfh vtj~ cbqjlj~ fj kefztjy pete le~
kjfbfe~ fj ~jgztbfef fj~ntbve~ jc jl tjglekjcvh r nhc jl pthp~bvh fj erzfet, fj
j~ve ahtke, e le~ Jcvbfefj~ uzj bcbnbjc ~z efepvenbc h tjgzlenbc e le chtkevbqe,
pete uzj pzjfec ~jljnnbhcet le~ ennbhcj~ ptbhtbvetbe~#
Jl nhcizcvh fj dzjce~ ptnvbne~ uzj ~btqec e le~ Jcvbfefj~ pete bcbnbet h kjihtet
~z efepvenbc e le Ljr, bfjcvbabnecfh le~ dzjce~ ptnvbne~, vecvh fj netnvjt
Tj~zkjc Jijnzvbqh fjl J~vzfbh ~hdtj le ~jgztbfef fj lh~ fevh~ fj netnvjt pjt~hcel jc jl kdbvh fj le~ JJLLHd~jtqevhtbh fj le ^jgztbfef fj le Bcahtkenbc _gbce >6 fj :2
8/7/2019 Resumen Ejecutivo Del Estudio Sobre La Seguridad de Los Datos de Caracter Personal en El Ambito de Las Entidad
35/59
Bc~vbvzvhCenbhcelfjVjnchlhge~fjleNhkzcbnenbc
htgecbyevbqh nhkh vncbnh, pete lhgtet zce efjnzefe r jabney bkplecvenbc fj le~
kjfbfe~ fj ~jgztbfef j}bgbfe~#
Lh~ jijkplh~ fj ne~h~ fj }bvhjc le eplbnenbc fj dzjce~ ptnvbne~# ^j mec
~jljnnbhcefh nzevth j}pjtbjcnbe~ uzj fj~venec pht elgc e~pjnvh tjlevbqh e le
LH_F, dbjc ~je pht le bkplecvenbc fj ahtke j}bvh~e fj elgzce kjfbfe fj
~jgztbfef h pht le ledht fj erzfe e hvte~ jcvbfefj~ uzj pzjfec j~vet ptj~vecfh
jc le envzelbfef#
5?#5 Cbqjlj~ fj kefztjy
Le fjabcbnbc fj cbqjlj~ fj kefztjy jc le bkplecvenbc aenblbvefe pht lh~ j}pjtvh~
ptjvjcfj ~hlznbhcet jl pthdljke fj le ~jljnnbc fj ptbhtbfefj~ jc le ae~j bcbnbel fjefepvenbc e le Ljr, fj ahtke uzj, nefe cbqjl enhkjve zce~ fjvjtkbcefe~ kjfbfe~ fj
~jgztbfef fj le tjglekjcvenbc e le~ uzj bt fecfh nzkplbkbjcvh pht ae~j~#
Le bkplecvenbc pthgtj~bqe fj j~vh~ cbqjlj~ pthphtnbhcet nhkh tj~zlvefh zce nhkpljve
efepvenbc e lh~ tjuzb~bvh~ fjabcbfh~ jc le chtkevbqe, e~ nhkh le hpvbkbyenbc fj lh~
nhcvthlj~ bkplecvefh~# Lh~ cbqjlj~ fj kefztjy, uzj ~hc enzkzlevbqh~, pzjfjc
nle~babnet~j fj le ~bgzbjcvj ahtke9
Cbqjl bcnhkpljvh fj nzkplbkbjcvh -cbqjl 5"9 nhkptjcfj le~ kjfbfe~ fj ~jgztbfef
jljkjcvelj~, ezcuzj ch bcnlzrjc vhfe~ le~ cjnj~etbe~ fj enzjtfh nhc leljgb~lenbc#
Cbqjl ljgel fj nzkplbkbjcvh -cbqjl 4"9 nhkptjcfj vhfe~ le~ kjfbfe~ fj ~jgztbfef
pete nhc~jgzbt le bkplecvenbc fj lh~ tjuzb~bvh~ tjnhgbfh~ jc jl TFLH_F#
Cbqjl eqecyefh fj nzkplbkbjcvh -cbqjl >"9 nhkptjcfj le gj~vbc r kjihte nhcvbce
fj vhfe~ le~ kjfbfe~ fjabcbfe~ jc jl TFLH_F r le~ dzjce~ ptnvbne~ fj ~z
gj~vbc#
Jl nhcizcvh fj kjfbfe~ bfjcvbabnefe~ ~hc nhc~bfjtefe~ ptjajtjcvjkjcvj jc zc cbqjl 4 fj
kefztjy nhkh jte lgbnh ptjqjjt pht le pthpbe bkplbnenbc uzj vbjcj ~z nzkplbkbjcvh#
Jcvtj le~ fb~ph~bnbhcj~ fj~vene jl fhnzkjcvh fj ~jgztbfef nhc 14,:* kjcnbhcj~ fj lh~
j}pjtvh~, le~ vjljnhkzcbnenbhcj~ -1?,2*" r jl tjgb~vth fj ennj~h -:=,>*"# Ch hd~vecvj, r
e pj~et fj j~ve ptbhtbyenbc, ch ~j fjdjc pjtfjt fj qb~ve le~ kjfbfe~ ztgjcvj~ e
fj~etthllet pete jl cbqjl 5, nhkh pht jijkplh9 le nhkzcbnenbc fj le~ azcnbhcj~ r
hdlbgenbhcj~ fjl pjt~hcel ->7,:*", le tjelbyenbc fj ezfbvhte~ ->6,=*" h le gj~vbc fj
~hphtvj~ r jl tjgb~vth fj bcnbfjcnbe~ -ekde~ nhc zc >>,>*"#
Nhkh cbqjl > ~j ~jelec nhkh ptbhtbvetbe~ le bfjcvbabnenbc r ezvjcvbabnenbc -42,4*", le~nhpbe~ fj tj~pelfh -47,>