GDPR Compliance Pays Off in Two Years for Large Bank
The focus on General Data Protection Regulation (GDPR) and its looming May 2018 deadline has spurred a number of conversations between CIOs and their organization’s legal teams. The questions remain basic but critical: Are we ready? And are we compliant?
Veritas GDPR Risk Analyzer – Find Personal Data now!
“How can software help me with my General Data Protection Regulation (GDPR) compliance efforts?” I get asked that a lot and like any compliance effort the answer is rarely black and white. What is black and white is that GDPR compliance, much like any compliance effort, starts and hinges on knowledge about where data, that requires governance, is located.Subject Access Requests – a danger to your business?
How to protect data is increasingly coming under the scrutiny of the international press particularly with the rise in ransomware attacks and hacking with the aim of gaining illicit access to sensitive information. The General Data Protection Regulation (GDPR) in the EU is also forcing organisations to consider how they manage the risk of collecting and using Personal Identifiable Information (PII). One of the problem areas, that GDPR will enforce, is that of being able to respond to a Subject Access Request.
What goes “Tick, Tock, Give me my Data”? – The GDPR Countdown!
We now have less than a year to go to be able to demonstrate readiness with the new General Data Protection Regulation (GDPR) rules, especially when it comes to being able to demonstrate the ability to know what data you have, why you have it, validate where you expect it to be and how you can search and process it all within a confined time period with confidence. Just in case you need reminding, the 25 th of May 2018 is the date this all comes into force and many organisations I talk to are still only just finding their pace to get this done.
Does GDPR Make You Want to Cry
If you have even a passing interest in GDPR, you will have known that 25th May 2017 was a significant date because it meant we're just a year away from GDPR becoming law across Europe. This of course sparked a lot of activity from vendors, analysts, regulators and just about anyone involved in the privacy or information governance world. However, a couple of weeks before, on May 12th there was another momentous incident to consider whichmade me wonder about the relevance of Ransomware attacks and GDPR. Obviously, there's a cybersecurity angle to Ransomware but there is also a question about making sure data, especially personal data is protected from malicious activity regardless of where an attack comes from.
