The Estonian data protection authority (AKI) has published recommendations on good practices regarding data security, emphasizing that it relies on daily habits.
The authority reminds that security is often compromised by simple negligence, such as unattended documents or poorly protected passwords, which can lead to damage, loss, or disclosure of information. It stresses the importance of regular backups to ensure business continuity and data restoration in case of an incident. Furthermore, access to information must be limited to what is strictly necessary according to a minimization principle, in order to reduce risks and facilitate control. Security is thus a continuous process that depends on employees' daily decisions regarding access management, vigilance towards suspicious emails, and visitor control.