General Data Protection Regulation – Are you Ready?

Everything you need to know about data security for GDPR

Webinar Replay: GDPR – Changing the Data Privacy Game. WATCH NOW

The Impact of GDPR

The European Union’s General Data Protection Regulation (GDPR) poses the biggest change to the regulatory landscape of data privacy. GDPR aims to unify data protection all across the EU and establish data privacy and protection as a fundamental right.

Regulation Penalties

Penalties for non-compliance may reach up to 4% of a company’s worldwide turnover or €20M.

Global Impact

ANY organization that handles EU citizens’ personal data, regardless of whether or not it operates in the EU is affected.

GDPR Key Principles for Data Security

Encryption

The pseudonymisation and encryption of personal data

System Integrity

The ongoing confidentiality, integrity, availability and resilience of processing systems and services.

Restore Access

The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.

Évaluations

A process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring security.

EU General Data Protection Regulation

TÉLÉCHARGER LE LIVRE BLANC

5 Must-Haves to Guide You with GDPR

Staffing

GDPR puts focus on ownership. Identify your technical lead, DPO, and executive sponsor to bear responsibility for data privacy programs.

Data Audit & Classification

Map data flows and relevant systems to mark various structures, files and systems where different levels of privacy need to be maintained. Include 3rd parties and backup systems.

Risk Analysis

GDPR strongly links data security to the risk of a breach. Assess your risk based on data types, volume, and processing systems. Run CheckMe instantly, or Security CheckUp for a broad assessment.

Activity Logging & Breach Identification

Establish robust audit trail of activity on in-scope systems, especially data access and admin activity, as well as rich logging across all protections in order to identify potential breach activity.