GDPR

From May 2018 stricter regulations will come into force concerning data protection with the aim of giving people greater control over their personal data, while ensuring the free flow of personal data between European Union Member States

Challenges facing Data Protection Regulation

To establish which threats are capable of exploiting the vulnerabilities of your business’ resources
To identify the vulnerabilities of each resource
To ensure all individuals affected are informed in the event of data leakage
To grant all individuals the right to be forgotten should they so request
To ensure individuals are informed about automated profiling and afforded the opportunity to disprove the results of such
To afford individuals the opportunity to unsubscribe from direct marketing campaigns
To introduce the strongest possible security measures with respect to special personal data
To ensure legal agreements are concluded concerning data transfer outside the EU

Business Impact Analysis / Privacy Impact Assessment
Data sets (personal data, special category personal data)
Data infrastructure (process – data – application)
Purpose, legal basis, retention period of data management

Data controller and data processor
Purpose limitation (data protection audit)
Data sharing audit
Tracking data protection activities
Risk analysis and treatment (CRAMM)
Accepted risks and risk treatment plans