The Impact of GDPR Compliance on IT and Security
|
|
- Peter Patterson
- 6 years ago
- Views:
Transcription
1 The Impact of GDPR Compliance on IT and Security
2 Experts on Panel Bojana Bellamy President Centre for Information Policy Leadership Vibhav Agarwal Director MetricStream 2017 MetricStream, Inc. All Rights Reserved.
3 Agenda The effect of GDPR on IT and security teams Technical and security measures to support data protection The interaction between IT and IS with data privacy compliance and legal A risk based approach to GDPR compliance Q&A 2017 MetricStream, Inc. All Rights Reserved.
4 GDPR Compliance Key impact for IT, CIO and CISO and Recommendations for Data Driven Organizations
5 A GLOBAL PRIVACY AND SECURITY THINK TANK CIPL at a glance BRIDGING REGIONS BRIDGING INDUSTRY & REGULATORS BRIDGING PRIVACY AND DATA DRIVEN INNOVATION ACTIVE GLOBAL REACH 55+ Member Companies 5+ Active Projects & Initiatives 20+ Events annually 15+ Principals and Advisors We INFORM through publications and events We SHAPE privacy policy, law and practice We NETWORK with global industry and government leaders We CREATE and implement best practices ABOUT US The Centre for Information Policy Leadership (CIPL) is a global privacy and security think tank Based in Washington, Brussels and London Founded in 2001 by leading companies and Hunton & Williams LLP CIPL works with industry leaders, regulatory authorities and policy makers to develop global solutions and best practices for data privacy and responsible use of data to enable the modern information age Twitter.com/the_cipl Pennsylvania Ave NW Washington, DC Park Atrium, Rue des Colonies Brussels, Belgium 30 St Mary Axe London EC3A 8EP
6 Key GDPR Changes at a Glance Harmonisation and progressive aspects Broader scope Increased obligations Strengthened rights of individuals Increased enforcement, fines, liability Harmonised rules, but not fully (e.g. employee data, children data) Obligations on both controller and processor DP principles tightened (consent, transparency/notices) Right to erasure Data portability Regulatory fines up to 4% of annual worldwide turnover One Stop Shop: Lead DPA for pan-european matters, in cooperation with other DPAs; Local DPA for local matters and redress for individuals Risk-based approach Some reduction of administrative burden (no national registration of processing. or prior authorisation) BCR, seals and certifications Extraterritorial application to foreign controller and processor Wider definition of personal data and sensitive data; anonymous data and pseudonymisation Processing data of children under 16 requires parental consent Profiling rules Privacy Impact Assessment Privacy by Design Breach notification - to DPAs and individuals Direct obligations and liability for processor Accountability - privacy programme Internal record of processing Right not to be subject to automated decision making Right to object Individual action Class action Criminal sanctions (in national laws) Larger role for European Data Protection Board (EDPB) Greater cooperation and consistency by DP regulators DP Officer
7 CIPL GDPR Project Deliverables to Date 5 Workshops and working sessions Amsterdam (Kick-off), Paris (DPO, Risk), Brussels (Certifications), Madrid (Transparency, Consent, Legitimate interest), Dublin (Smart Regulation) 5 CIPL Papers Submitted to WP29 DPO Risk and DPIA One Stop Shop and Lead DPA Certifications Transparency, Consent, Legitimate Interest eprivacy Regulation Consultation Response 4 CIPL Responses to WP29 Guidance DPO, Data Portability, Lead SA, DPIA GDPR Readiness Survey Report 3 CIPL Papers in Progress Smart Regulation eprivacy Regulation Profiling and Automated Decision-Making
8 GDPR: Key Areas of Strategic Impact DPIA and Risk Assessment Privacy Engineers Vendor management Data strategy and Big Data enablement Breach management Data transfers strategy DPA relationship management DPO led, documented, risk-based, verified, demonstrated Impact and interaction with global program DP Program Corporate Digital Responsibility Legal uncertainty and disputes management
9 Level of Impact CIPL & AvePoint Joint GDPR Readiness Survey Oct 2016 Privacy Management Programme Use/Contracting with processors Individual rights Readiness Data breach notification SENIOR MANAGEMENT KEY CONCERNS Enhanced sanctions Data breach reporting Stricter rules on consent & data reuseccc Individual rights Changes to internal privacy program Legitimate interest, Privacy by Design, DPIA and risk - the main areas requiring most clarification
10 Accountability in GDPR Privacy Programme Controllers must: Be responsible for compliance with GDPR Implement appropriate and effective technical and organisational measures to comply with the GDPR Demonstrate compliance & effectiveness of the measures Taking into account: The nature, scope, context, and purposes of the data processing The risk for individuals - physical, moral, material damages
11 Compliance Tools, Technology, Software Currently organizations do not widely use, or have access to, technology tools and software to aid with data privacy compliance tasks. Only a minority use technology to automate and industrialize: DPIAs; Data classification and tagging policies; Data processing records / inventories; Delivery of new data portability right. Where else can technology help? Right of access, consent management, privacy transparency dashboards, Privacy Program demonstration, etc.
12 GDPR Opportunity to Rethink Data Privacy and Information Management Strategy Enable new business models, digitalisation and data innovation Address expectations for increased transparency, user control and value, corporate responsibility Ensure data sustainability and digital trust Address regulatory changes - impact and implementation Mitigate legal, commercial and reputational risks
13 Systematic Changes Ahead for Organisations GDPR implementation requires company-wide change management program DP becomes a business issue - wide impact on company s globalisation, digital transformation and data strategy DP becomes board-level issue higher enterprise risk; larger business, legal and compliance impact; security breach notification and management Holistic and joined-up approach - between CIO, CISO, CDO, CMO, CPO, Legal and communications / media relations DP Officer (DPO) - becomes a more strategic, senior and multi-skilled role Greater need for managing external engagement and relationships (DPAs, EDPB, individuals, media, privacy advocates)
14 EU GDPR - Key Red Flags for IT, CIO, CISO Privacy Impact Assessments, based on risk to individuals Privacy by Design and Privacy by Default Security breach management & notification Internal inventory of processing Third party providers (software and services) Wide regulated personal data Coordinated action DPO, CIO, CISO Tension privacy v. security
15 Holistic Approach to Privacy and Security Two sides of the same coin There is no privacy without security Privacy can be breached without a breach of security Convergence Privacy > Security Governance Conflict Enabling business growth and innovation Protecting assets and information creates privacy risks
16 GDPR Compliance Steps Understand your data, its relevance and the risks customers, employees, third parties contacts, website users Create and maintain accourate records of processing Appoint DPO, or allocate responsibility for DP compliance Establish legal basis for each data processing consent, legitimate interest, contract necessity, etc. Draft privacy notices and policies for individuals Create DPIA processes / templates and carry out DPIA for existing and new processing and new projects Draft vendor DP due diligence and contracting templates Create legal mechanisms for sharing data globally Establish procedures for rights of individuals Develop and test breach response and notification procedures Training and communication of the staff and relevant functions On-going compliance and monitoring / auditing
17 Thank you Bojana Bellamy Centre for Information Policy Leadership Hunton & Williams Privacy and Information Security Law Blog FOLLOW US ON LINKEDIN linkedin.com/company/centre-for-information-policy-leadership FOLLOW US ON
18 How can technology help you? Vibhav Agarwal Director MetricStream
19 Top Concerns of CIOs within Enterprises* *cioinsights.com 2017 MetricStream, Inc. All Rights Reserved.
20 Key Requirements for GDPR Centralized repository/ library of articles, controls, and requirements for GDPR compliance Establish an integrated framework to conduct Data Privacy Impact Assessments (DPIAs) through surveys and questionnaires Enable the implementation of robust data privacy processes and controls Generate delta control reports, as well as other reports and dashboards to assess GDPR compliance Manage issues generated from risk and control assessments 2017 MetricStream, Inc. All Rights Reserved.
21 GDPR - Focus on Key Areas Assess Compliance Ongoing Compliance Data Privacy Risks, Controls & Process setup Data Privacy Impact Assessments Data Protection Audits Controls Compliance Risk Assessments Update Risk register, Control register and Process register with GDPR data Perform survey based Impact assessments across assets and processes across Bus and Third parties Addition of testing strategies and steps to audit Data breach response plan and PII storage Comprehensive Extended Orgwide Controls assessment process for GDPR related controls Workflow to assess enterprise & IT Risks quantitatively based on inherent factors and control effectiveness 2017 MetricStream, Inc. All Rights Reserved.
22 Implementation of an Industry Standard Solution Centralized IT Repository Relational Data Model Data Privacy Impact Assessments Controls Compliance & Risk Assessment Third Party Compliance Assessment Management Reporting 2017 MetricStream, Inc. All Rights Reserved.
23 Way forward Strategy Design Implement Assess Monitor Define the overall management strategy for managing GDPR compliance Create an Risk and Compliance process with ownership and governance to meet the GDPR mandate Implement a Technology solution to ensure traceability and accountability across the workflow Assess IT controls and IT risks leveraging the latest controls, questions and procedure libraries Monitor the assessments and perform management reporting via reports and dashboards Consultancy Technology solution 2017 MetricStream, Inc. All Rights Reserved.
24 Are you GDPR ready? 2017 MetricStream, Inc. All Rights Reserved.
25 About MetricStream Vision Integrated Governance, Risk and Compliance for Better Business Performance Solutions Risk Management IT Risk Management Business Continuity Management IT Compliance Management SOX Compliance Management Enterprise Risk Management Internal Audit Management Compliance Management Policy and Document Management Regulatory Change Management Partners Organization Differentiators Over 1,400 employees Headquarters in Palo Alto, California with offices worldwide Over 400 enterprise customers Privately held Backed by global leading VCs, Sage View Capital, Goldman Sachs Technology - GRC Platform 9 Patents Breadth of Solutions Single Vendor for all GRC needs Cross-industry Best Practices and Domain Knowledge ComplianceOnline.com - Largest Compliance Portal on the Web 2017 MetricStream, Inc. All Rights Reserved.
26 Topics in Discussion Include: GRC for High Performers Days Speakers Sessions Attendees Is your company ready for GDPR A Chief Privacy Officer s Perspective Emerging Audit trends and challenges Converging Across Emerging and Evolving Risks Building An Enterprise Strategy MetricStream GRC Summit 2017 Date: November 6-7, 2017 Location: Lancaster London Hotel, London, UK Register now Use Discount Code WEB200 & Register Now for JUST 599
27 Q&A Bojana Bellamy President Centre for Information Policy Leadership Vibhav Agarwal Director MetricStream Thank you for participating! A copy of this presentation will be made available to all participants in next 48 working hours. For more details on upcoming MetricStream webinars: MetricStream, Inc. All Rights Reserved.
28 THANK YOU Contact Us: Website: Phone: USA UAE UK MetricStream, Inc. All Rights Reserved.
CIPL Roundtable Accountable AI: Solutions for Data Privacy and Innovation in Europe. Brussels Tech Summit
CIPL Roundtable Accountable AI: Solutions for Data Privacy and Innovation in Europe Brussels Tech Summit 7 June 2018 CIPL at a Glance A GLOBAL PRIVACY AND SECURITY THINK TANK BRIDGING REGIONS BRIDGING
More informationPROJECT BACKGROUND AND RATIONALE
PROJECT BACKGROUND AND RATIONALE The political agreement on the EU General Data Protection Regulation (GDPR) has been reached and the new Regulation will be on the books by the end of the first quarter
More informationEU General Data Protection Regulation (GDPR) Achieving compliance
EU General Data Protection Regulation (GDPR) Achieving compliance GDPR enhancing data protection and privacy The new EU General Data Protection Regulation (GDPR) will apply across all EU member states,
More informationGDPR: A QUICK OVERVIEW
GDPR: A QUICK OVERVIEW 2018 Get ready now. 29 June 2017 Presenters Charles Barley Director, Risk Advisory Services Charles Barley, Jr. is responsible for the delivery of governance, risk and compliance
More informationA Modern European Data Protection Framework
A Modern European Data Protection Framework India, March 2018 Ralf Sauer European Commission, DG Justice Outline 1) 1. The new EU data protection framework 2) 2. The transition period 3) 3. GDPR: trust,
More informationManaging Privacy Risk & Compliance in Financial Services. Brett Hamilton Advisory Solutions Consultant ServiceNow
Managing Privacy Risk & Compliance in Financial Services Brett Hamilton Advisory Solutions Consultant ServiceNow 1 Speaker Introduction INSERT PHOTO Name: Brett Hamilton Title: Advisory Solutions Consultant
More informationKnowing and Implementing the GDPR Part 3
Knowing and Implementing the GDPR Part 3 11 a.m. ET, 16:00 GMT March 29, 2017 Welcome & Introductions Panelists Your Host Dave Cohen IAPP Knowledge Manager Omer Tene Vice President Research & Education
More informationTHE NEW EU DATA PROTECTION REGULATION: WHAT IS IT AND WHAT DO WE NEED TO DO? KALLIOPI SPYRIDAKI CHIEF PRIVACY STRATEGIST, EUROPE
THE NEW EU DATA PROTECTION REGULATION: WHAT IS IT AND WHAT DO WE NEED TO DO? KALLIOPI SPYRIDAKI CHIEF PRIVACY STRATEGIST, EUROPE EU DATA PROTECTION REGULATION Kalliopi Spyridaki Chief Privacy Strategist,
More informationThe GDPR Are you ready?
The GDPR Are you ready? kpmg.ie The GDPR - Overview The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) will come into force from 25th May 2018, replacing the existing data protection
More informationHow icims Supports. Your Readiness for the European Union General Data Protection Regulation
How icims Supports Your Readiness for the European Union General Data Protection Regulation The GDPR is the EU s next generation of data protection law. Aiming to strengthen the security and protection
More informationData Management and Security in the GDPR Era
Data Management and Security in the GDPR Era Franck Hourdin; Vice President, EMEA Security Russ Lowenthal; Director, Database Security Product Management Mike Turner; Chief Operating Officer, Capgemini
More informationTechnology's role in General Data Protection Regulation Dr. Prokopios Drogkaris Officer in NIS SECPRE 2017 Oslo
Technology's role in General Data Protection Regulation Dr. Prokopios Drogkaris Officer in NIS SECPRE 2017 Oslo 15.9.2017 European Union Agency for Network and Information Security Fighting fraud in school
More informationGetting ready for GDPR. Philipp Hobler EMEA Field CTO Global Technology Office Dell EMC Data Protection Solutions
Getting ready for GDPR Philipp Hobler EMEA Field CTO Global Technology Office Dell EMC Data Protection Solutions GDPR Background Single EU-wide Regulation Harmonizes Global User Data Protection across
More informationDo you handle EU residents personal data? The GDPR update is coming May 25, Are you ready?
European Union (EU) General Data Protection Regulation (GDPR) Do you handle EU residents personal data? The GDPR update is coming May 25, 2018. Are you ready? What do you need to do? Governance and Accountability
More informationCisco Spark and GDPR. Thomas Flambeaux. Collaboration Consulting Solution Engineer, Security and Compliance. Cisco Connect 2018 Copenhagen April 12th
Cisco Spark and GDPR Thomas Flambeaux Collaboration Consulting Solution Engineer, Security and Compliance Cisco Connect 2018 Copenhagen April 12th 2015 Cisco and/or its affiliates. All rights reserved.
More informationIMPLEMENTING SECURITY, PRIVACY, AND FAIR DATA USE PRINCIPLES
IMPLEMENTING SECURITY, PRIVACY, AND FAIR DATA USE PRINCIPLES Introductions Agenda Overall data risk and benefit landscape / shifting risk and opportunity landscape and market expectations Looking at data
More informationThe Role of the Data Protection Officer
The Role of the Data Protection Officer Adrian Ross LLB (Hons), MBA GRC Consultant IT Governance Ltd 28 July 2016 www.itgovernance.co.uk Introduction Adrian Ross GRC consultant Infrastructure services
More informationGeneral Data Protection Regulation (GDPR)
BCD Travel s Response to the EU General Data Protection Regulation (GDPR) November 2017 Page 1 Response to the EU GDPR Copyright 2017 by BCD Travel N.V. All rights reserved. November 2017 Copyright 2017
More informationRobert Bond. Respecting Privacy, Securing Data and Enabling Trust a view from Europe
Respecting Privacy, Securing Data and Enabling Trust a view from Europe Robert Bond, Partner & Notary Public Robert Bond Robert Bond has nearly 40 years' experience in advising national and international
More informationEU Data Protection Triple Threat for May of 2018 What Inside Counsel Needs to Know
EU Data Protection Triple Threat for May of 2018 What Inside Counsel Needs to Know The General Data Protection Regulation (GDPR) The eprivacy Regulation (epr) The Network and Information Security Directive
More informationGeneral Data Protection Regulation (GDPR) The impact of doing business in Asia
SESSION ID: GPS-R09 General Data Protection Regulation (GDPR) The impact of doing business in Asia Ilias Chantzos Senior Director EMEA & APJ Government Affairs Symantec Corporation @ichantzos Typical Customer
More informationMartijn Loderus. Merritt Maxim. Principal Analyst Forrester. Director & Global Practice Partner for Advisory Consulting Janrain
Merritt Maxim Principal Analyst Forrester Martijn Loderus Director & Global Practice Partner for Advisory Consulting Janrain Merritt and Martijn will share insights on Digital Transformation & Drivers
More informationGDPR and the Privacy Shield
GDPR and the Privacy Shield Mark Prinsley Partner +44 20 3130 3900 mprinsley@mayerbrown.com Kendall Burman Counsel + 202 263 3210 kburman@mayerbrown.com Speakers Kendall Burman Counsel Washington DC Mark
More informationPlan a Pragmatic Approach to the new EU Data Privacy Regulation
AmChamDenmark event: EU Compliant & Cyber Resistant Plan a Pragmatic Approach to the new EU Data Privacy Regulation Janus Friis Bindslev, Partner Cyber Risk Services, Deloitte 4 February 2016 Agenda General
More informationGDPR Privacy Webinar. Prioritizing Your Path towards GDPR Compliance Annika Sponselee and Nicole Vreeman 28 February 2018
GDPR Privacy Webinar Prioritizing Your Path towards GDPR Compliance Annika Sponselee and Nicole Vreeman 28 February 2018 Prioritizing Your Path to GDPR Compliance Presented by Half-Day Workshops Online
More informationDisruptive Technologies Legal and Regulatory Aspects. 16 May 2017 Investment Summit - Swiss Gobal Enterprise
Disruptive Technologies Legal and Regulatory Aspects 16 May 2017 Investment Summit - Swiss Gobal Enterprise Legal and Regulatory Framework in Switzerland Legal and regulatory Framework: no laws or provisions
More informationSCHOOL SUPPLIERS. What schools should be asking!
SCHOOL SUPPLIERS What schools should be asking! Page:1 School supplier compliance The General Data Protection Regulation (GDPR) comes into force on 25 May 2018 and will be applied into UK law via the updated
More informationGeneral Data Protection Regulation (GDPR)
General Data Protection Regulation (GDPR) Michael Eva, London Grid for Learning What is GDPR? General Data Protection Regulation (GDPR) protects the personal data of EU citizens regardless of where the
More informationEmbedding GDPR into the SDLC
Embedding GDPR into the SDLC Sebastien Deleersnyder Siebe De Roovere Toreon 2 Who is Who? Sebastien Deleersnyder Siebe De Roovere 5 years developer experience 15+ years information security experience
More informationGDPR: Is it just another regulation or a great opportunity for operational excellence? Athens, February 2018
GDPR: Is it just another regulation or a great opportunity for operational excellence? Athens, February 2018 GDPR Roadmap Continuous Awareness Program Implement Privacy Solutions Intergrade Privacy into
More informationGeneral Data Protection Regulation: Knowing your data. Title. Prepared by: Paul Barks, Managing Consultant
General Data Protection Regulation: Knowing your data Title Prepared by: Paul Barks, Managing Consultant Table of Contents 1. Introduction... 3 2. The challenge... 4 3. Data mapping... 7 4. Conclusion...
More informationAon Service Corporation Law Global Privacy Office. Aon Client Data Privacy Summary
Aon Client Data Privacy Summary Table of Contents Our Commitment to Data Privacy 3 Our Data Privacy Principles 4 Aon Client Data Privacy Summary 2 Our Commitment to Data Privacy Data Privacy Backdrop As
More informationEmbedding GDPR into the SDLC. Sebastien Deleersnyder Siebe De Roovere
Embedding GDPR into the SDLC Sebastien Deleersnyder Siebe De Roovere Who is Who? Sebastien Deleersnyder 5 years developer experience 15+ years information security experience Application security consultant
More informationGeneral Data Protection Regulation (GDPR) NEW RULES
General Data Protection Regulation (GDPR) NEW RULES AGENDA A. GDPR : general overview B. Sectorial topics and concerns GDPR GENERAL OVERVIEW 1. GDPR : WHAT IS IT AND WHY CARE? 27 April 2016 : Approval
More informationIT MANAGEMENT AND THE GDPR: THE VMWARE PERSPECTIVE
TRANSFORM SECURITY DATA PROTECTION SOLUTION OVERVIEW IT MANAGEMENT AND THE GDPR: THE VMWARE PERSPECTIVE Introduction This Solution Overview is intended for IT personnel interested in the VMware perspective
More informationPROTECT YOUR DATA AND PREPARE FOR THE EUROPEAN GENERAL DATA PROTECTION REGULATION
PROTECT YOUR DATA AND PREPARE FOR THE EUROPEAN GENERAL DATA PROTECTION REGULATION INSIGHTS The EU s new data protection regulation, known as the GDPR (General Data Protection Regulation), can impact your
More informationISO / IEC 27001:2005. A brief introduction. Dimitris Petropoulos Managing Director ENCODE Middle East September 2006
ISO / IEC 27001:2005 A brief introduction Dimitris Petropoulos Managing Director ENCODE Middle East September 2006 Information Information is an asset which, like other important business assets, has value
More informationChanging times in Swiss Data Privacy: new opportunities? Microsoft Security Day 27 April 2017 Clara-Ann Gordon
Changing times in Swiss Data Privacy: new opportunities? Clara-Ann Gordon Which countries have Data Protection Laws? Source: https://www.taylorwessing.com/globaldatahub/risk_map.html Page 2 Different Data
More informationGDPR is coming in less than 2 months Are you ready?
GDPR is coming in less than 2 months Are you ready? Charles-Albert Helleputte Partner, Brussels +32 2 551 5982 chelleputte@mayerbrown.com 30 March 2018 2 GDPR is everywhere... You were invited by UNICEO
More informationEXAM PREPARATION GUIDE
EXAM PREPARATION GUIDE PECB Certified Data Protection Officer The objective of the PECB Certified Data Protection Officer examination is to ensure that the candidate has acquired the knowledge and skills
More informationEU DATA PRIVACY COMPLIANCE FOR US DRIVEN PROJECTS
EU DATA PRIVACY COMPLIANCE FOR US DRIVEN PROJECTS 18 May 2014 Monica Salgado Portuguese Laywer (Advogada) / Registered European Lawyer Janine Regan Solicitor Monica Salgado Monica is a Portuguese qualified
More informationSCCE ECEI 2014 EU DATA PRIVACY COMPLIANCE FOR US DRIVEN PROJECTS. Monica Salgado JANINE REGAN CIPP/E
EU DATA PRIVACY COMPLIANCE FOR US DRIVEN PROJECTS 18 May 2014 Monica Salgado Portuguese Laywer (Advogada) / Registered European Lawyer Janine Regan Solicitor Monica Salgado Monica is a Portuguese qualified
More informationGDPR Impacts. SEV GDPR Workshop Athens Giles Watkins, UK Country Leader. Wednesday 7th February,
GDPR Impacts SEV GDPR Workshop Athens Giles Watkins, UK Country Leader Wednesday 7th February, 2018 Agenda What is the Privacy Opportunity? What is different under GDPR? Where organisations are focusing?
More informationData Warehouse Risk Assessment (GDPR)
Data Warehouse Risk Assessment (GDPR) The new data protection law is effective from 25.05.2018. Individuals will have more control of their personal data and organisations will have to implement a risk
More informationDATA PROTECTION BY DESIGN
DATA PROTECTION BY DESIGN Preparing for Europe s New Security Regulations Summary In 2018, the European Union will begin to enforce the provisions of the General Data Protection Regulation (GDPR), a new
More informationImplementing the new GDPR: what does it mean for Universities?
Implementing the new GDPR: what does it mean for Universities? Case study Alumni Portal Cosimo Monda Director - European Centre on Privacy and Cybersecurity Maastricht University Twitter: @ecpcmaastricht
More informationTIPS FOR FORGING A BETTER WORKING RELATIONSHIP BETWEEN COUNSEL AND IT TO IMPROVE CYBER-RESPONSE
TIPS FOR FORGING A BETTER WORKING RELATIONSHIP BETWEEN COUNSEL AND IT TO IMPROVE CYBER-RESPONSE Association of Corporate Counsel NYC Chapter 11/1 NYC BDO USA, LLP, a Delaware limited liability partnership,
More informationOur agenda. The basics
GDPR - AVG - RGPD. Our agenda The basics Key actions Responsibilities The basics Key actions Responsibilities Who cares? Why? From directive to regulation 24 Oct 1995: a Directive 95/46/EC is adopted partially
More informationPRC Cyber Security Law --- How does it affect a UK business? Xun Yang Of Counsel, Commercial IP and Technology
PRC Cyber Security Law --- How does it affect a UK business? Xun Yang Of Counsel, Commercial IP and Technology 24 October 2017 Content Overview of Cyber Security Law Observations on Implementation of Cyber
More informationEU GDPR & ISO Integrated Documentation Toolkit https://advisera.com/eugdpracademy/eu-gdpr-iso integrated-documentation-toolkit
EU GDPR & https://advisera.com/eugdpracademy/eu-gdpr-iso-27001-integrated-documentation-toolkit Note: The documentation should preferably be implemented in the order in which it is listed here. The order
More informationThe GDPR and NIS Directive: Risk-based security measures and incident notification requirements
The GDPR and NIS Directive: Risk-based security measures and incident notification requirements Adrian Ross LLB (Hons), MBA GRC Consultant IT Governance Ltd 4 May 2017 Introduction Adrian Ross GRC consultant
More informationBHConsulting. Your trusted cybersecurity partner
Your trusted cybersecurity partner BH Consulting Securing your business BH Consulting is an award-winning, independent provider of cybersecurity consulting and information security advisory services. Recognised
More informationAccelerate GDPR compliance with the Microsoft Cloud
Regional Forum on Cybersecurity in the Era of Emerging Technologies & the Second Meeting of the Successful Administrative Practices -2017 Cairo, Egypt 28-29 November 2017 Accelerate GDPR compliance with
More informationEY s Data Privacy Services. January 2019
EY s Data Privacy Services January 2019 Introduction Data privacy encompasses the rights and obligations of individuals and organizations with respect to the collection, use, disclosure, and retention
More informationGeneral Data Protection Regulation April 3, Sarah Ackerman, Managing Director Ross Patz, Consultant
General Data Protection Regulation April 3, 2018 Sarah Ackerman, Managing Director Ross Patz, Consultant Introductions Sarah Ackerman, CISSP, CISA Managing Director, Cincinnati Responsible for overall
More informationConducting a data flow mapping exercise under the GDPR. Presented by: Alan Calder, founder and executive chairman, IT Governance 4 October 2017
Conducting a data flow mapping exercise under the GDPR Presented by: Alan Calder, founder and executive chairman, IT Governance 4 October 2017 TM Introduction Alan Calder Founder of IT Governance The single
More informationCyber Security Law --- Are you ready?
Cyber Security Law --- Are you ready? Xun Yang Of Counsel, Commercial IP and Technology 9 May 2017 1 / B_LIVE_APAC1:2207856v1 Content Overview of Cyber Security Law Legislative Development Key Issues in
More informationProhire Software Systems Limited ("Prohire")
Prohire Software Systems Limited ("Prohire") White paper on Prohire GDPR compliance measures 11 th May 2018 Contents 1. Overview 2. Legal Background 3. How Prohire complies 4. Wedlake Bell 5. Conclusion
More informationBHBIA New Data Protection Rules. Pharma Company Perspective. Guy Murray Director, Market Research & Analytics, GC&BI MR Operations and Compliance, MSD
BHBIA New Data Protection Rules Pharma Company Perspective Guy Murray Director, Market Research & Analytics, GC&BI MR Operations and Compliance, MSD Pharma Company Perspective Data Controllers Responsibilities
More informationAchieving effective risk management and continuous compliance with Deloitte and SAP
Achieving effective risk management and continuous compliance with Deloitte and SAP 2 Deloitte and SAP: collaborating to make GRC work for you Meeting Governance, Risk and Compliance (GRC) requirements
More informationUSER CORPORATE RULES. These User Corporate Rules are available to Users at any time via a link accessible in the applicable Service Privacy Policy.
These User Corporate Rules are available to Users at any time via a link accessible in the applicable Service Privacy Policy. I. OBJECTIVE ebay s goal is to apply uniform, adequate and global data protection
More informationNYDFS Cybersecurity Regulations
SPEAKERS NYDFS Cybersecurity Regulations Lisa J. Sotto Hunton & Williams LLP (212) 309-1223 lsotto@hunton.com www.huntonprivacyblog.com March 9, 2017 The Privacy Team at Hunton & Williams Over 30 privacy
More informationData Protection and GDPR
Data Protection and GDPR At DPDgroup UK Ltd (DPD & DPD Local) we take data protection seriously and have updated all our relevant policies and documents to ensure we meet the requirements of GDPR. We have
More informationCanada Life Cyber Security Statement 2018
Canada Life Cyber Security Statement 2018 Governance Canada Life has implemented an Information Security framework which supports standards designed to establish a system of internal controls and accountability
More informationINTELLIGENCE DRIVEN GRC FOR SECURITY
INTELLIGENCE DRIVEN GRC FOR SECURITY OVERVIEW Organizations today strive to keep their business and technology infrastructure organized, controllable, and understandable, not only to have the ability to
More informationGDPR compliance. GDPR preparedness with OpenText InfoArchive. White paper
White paper GDPR preparedness with OpenText InfoArchive The new EU privacy law, GDPR, will be in effect in less than a year. OpenText has the solutions to help you prepare and comply to this new law. Contents
More informationDealing with Security and Security Breaches
BEIJING BRUSSELS CHICAGO DALLAS FRANKFURT GENEVA HONG KONG LONDON LOS ANGELES NEW YORK PALO ALTO SAN FRANCISCO SHANGHAI SINGAPORE SYDNEY TOKYO WASHINGTON, D.C. Dealing with Security and Security Breaches
More informationTHE NEW GENERAL DATA PROTECTION REGULATION IMPLICATIONS FOR ENTERPRISES. Forum financier du Brabant wallon
THE NEW GENERAL DATA PROTECTION REGULATION IMPLICATIONS FOR ENTERPRISES Forum financier du Brabant wallon 14.12.2017 Data Protection should be part of every company s or organisation s DNA Do you process
More informationGDPR - Are you ready?
GDPR - Are you ready? Anne-Marie Bohan and Michael Finn 24 March 2018 Matheson Ranked Ireland s Most Innovative Law Firm Financial Times 2017 International Firm in the Americas International Tax Review
More informationCreating Value With GDPR
Creating Value With GDPR Practical Steps 20 th February 2017 Jessica Douglas Executive Partner for GDPR, IBM UK & Ireland jessica.douglas@uk.ibm.com 2017 IBM UK & Ireland 2017 IBM UK & Ireland 1 Shifting
More informationAdtech and GDPR What to consider when choosing your partner
Adtech and GDPR What to consider when choosing your partner 1 Agenda What to avoid and What to do Where is Adform on GDPR Posibilities for advertisers 2 This is about GDPR, not the unknown eprivacy update
More informationGeneral Data Protection Regulation (GDPR) Key Facts & FAQ s
General Data Protection Regulation (GDPR) Key Facts & FAQ s GDPR comes into force on 25 May 2018 GDPR replaces the Data Protection Act 1998. The main principles are much the same as those in the current
More informationGDPR compliance: some basics & practical to do list
GDPR compliance: some basics & practical to do list Philippe LAURENT independent full service business law firm located in Brussels May 2017 Personal data processing = any operation or set of operations
More informationDeveloping your GDPR response for competitive advantage. EU General Data Protection Regulation (GDPR)
Developing your GDPR response for competitive advantage EU General Data Protection Regulation (GDPR) Introduction In May 2018, the EU s new GDPR ushers in unprecedented levels of data protection for EU
More informationFileFacets for GDPR. Solution Overview for Compliance. Copyright 2017 FileFacets Corporation. All rights reserved
FileFacets for GDPR Solution Overview for Compliance Copyright 2017 FileFacets Corporation. All rights reserved Contents FileFacets Overview... 3 GDPR Key Changes... 4 Key Changes to Policy... 4 Key Changes
More informationIncentives for IoT Security. White Paper. May Author: Dr. Cédric LEVY-BENCHETON, CEO
White Paper Incentives for IoT Security May 2018 Author: Dr. Cédric LEVY-BENCHETON, CEO Table of Content Defining the IoT 5 Insecurity by design... 5 But why are IoT systems so vulnerable?... 5 Integrating
More informationIT Governance Framework at KIT
[unofficial English version; authoritative is the German version] IT Governance Framework at KIT 1. Recent situation and principle objectives Digitalization increasingly influences our everyday life at
More informationEY s data privacy service offering. How to transform your data privacy capabilities for an EU General Data Protection Regulation (GDPR) world
EY s data privacy service offering How to transform your data privacy capabilities for an EU General Data Protection Regulation (GDPR) world In May 2018, the European Union s new General Data Protection
More informationRecommendations on How to Tackle the D in GDPR. White Paper
Recommendations on How to Tackle the D in GDPR White Paper ABOUT INFORMATICA Digital transformation changes expectations: better service, faster delivery, with less cost. Businesses must transform to stay
More informationTurning Risk into Advantage
Turning Risk into Advantage How Enterprise Wide Risk Management is helping customers succeed in turbulent times and increase their competitiveness Glenn Tjon Partner KPMG Advisory Presentation Overview
More informationGDPR Compliance. Clauses
1 Clauses GDPR The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a privacy and data protection regulation in the European Union (EU). It became enforceable from May 25 2018. The
More informationDirect Marketing and its Relevance: The 'Opt-in Challenge'
Direct Marketing and its Relevance: The 'Opt-in Challenge' Martijn van den Corput (OptInsight), Tjeerd van der Stroom (OptInsight) and Legal Editor Andre Walter (Baker McKenzie Amsterdam) How can organizations
More informationMNsure Privacy Program Strategic Plan FY
MNsure Privacy Program Strategic Plan FY 2018-2019 July 2018 Table of Contents Introduction... 3 Privacy Program Mission... 4 Strategic Goals of the Privacy Office... 4 Short-Term Goals... 4 Long-Term
More informationENFORCEMENT POWERS. The EU Perspective. Olivier Proust. Associate Hunton & Williams LLP
ENFORCEMENT POWERS The EU Perspective Olivier Proust Associate Hunton & Williams LLP What is enforcement within the EU? Broad sense: Any action leading to better compliance Awareness raising activities
More informationCountdown to GDPR. Impact on the Security Ecosystem and How to Prepare
Countdown to GDPR Impact on the Security Ecosystem and How to Prepare Susan Kohn Ross, Esq. Mitchell Silberberg & Knupp LLP Jasvir Gill Alert Enterprise Lora Wilson Axis Communications Affected Countries
More informationBHConsulting. Your trusted cybersecurity partner
Your trusted cybersecurity partner BH Consulting Securing your business BH Consulting is an award-winning, independent provider of cybersecurity consulting and information security advisory services. Recognised
More informationPS Mailing Services Ltd Data Protection Policy May 2018
PS Mailing Services Ltd Data Protection Policy May 2018 PS Mailing Services Limited is a registered data controller: ICO registration no. Z9106387 (www.ico.org.uk 1. Introduction 1.1. Background We collect
More informationEIT Health UK-Ireland Privacy Policy
EIT Health UK-Ireland Privacy Policy This policy describes how EIT Health UK-Ireland uses your personal information, how we protect your privacy, and your rights regarding your information. We promise
More informationTHE TRUSTED NETWORK POWERING GLOBAL SUPPLY CHAINS AND THEIR COMMUNITIES APPROVED EDUCATION PROVIDER INFORMATION PACK
GAIN RECOGNITION AS AN APPROVED PROVIDER UNDER ISO/IEC 17024 AND JOIN OUR NETWORK OF TRUSTED PROVIDERS THE TRUSTED NETWORK POWERING GLOBAL SUPPLY CHAINS AND THEIR COMMUNITIES APPROVED EDUCATION PROVIDER
More informationEU GDPR & NEW YORK CYBERSECURITY REQUIREMENTS 3 KEYS TO SUCCESS
EU GDPR & NEW YORK CYBERSECURITY REQUIREMENTS 3 KEYS TO SUCCESS MEET THE EXPERTS DAVID O LEARY Director, Forsythe Security Solutions THOMAS ECK Director, Forsythe Security Solutions ALEX HANWAY Product
More informationAWS Webinar. Navigating GDPR Compliance on AWS. Christian Hesse Amazon Web Services
AWS Webinar Navigating GDPR Compliance on AWS Christian Hesse Amazon Web Services What is the GDPR? What is the GDPR? The "GDPR" is the General Data Protection Regulation, a significant new EU Data Protection
More informationBENEFITS of MEMBERSHIP FOR YOUR INSTITUTION
PROFILE The Fiduciary and Investment Risk Management Association, Inc. (FIRMA ) is the leading provider of fiduciary and investment risk management education and networking to the fiduciary and investment
More informationSword vs. Shield: Using Forensics Pre-Breach in a GDPR World. September 20, 2017
Sword vs. Shield: Using Forensics Pre-Breach in a GDPR World September 20, 2017 The information and opinions expressed by our panelists today are their own, and do not necessarily represent the views of
More informationCharting the Course to GDPR: Setting Sail
SESSION ID: GRC R02 Charting the Course to GDPR: Setting Sail Cindy E. Compert, CIPT/M CTO Data Security & Privacy IBM Security @CCBigData Disclaimer Notice: Clients are responsible for ensuring their
More informationNHS R&D Forum Privacy Policy: FINAL v0.1 May 25 th 2018
NHS R&D Forum Privacy Policy: FINAL v0.1 May 25 th 2018 This privacy policy is published to provide transparent information about how we use, share and store any personal information that you may provide
More informationSecurity and Privacy Governance Program Guidelines
Security and Privacy Governance Program Guidelines Effective Security and Privacy Programs start with attention to Governance. Governance refers to the roles and responsibilities that are established by
More informationPRIVACY ACROSS THE POND
PRIVACY ACROSS THE POND GDPR, PRIVACY SHIELD AND BREXIT OH MY! ACC NATIONAL CAPITAL REGION 2017 DATA PRIVACY AND SECURITY CONFERENCE SEPTEMBER 13, 2017 Michelle Beistle, CIPP/E/US Jessica Retka Gretchen
More informationRequirements for a Managed System
GDPR Essentials Requirements for a Managed System QG Publication 6 th July 17 Document No. QG 0201/4.3 Requirements for a Managed GDPR System The General Data Protection Regulation GDPR will apply in the
More informationManchester Metropolitan University Information Security Strategy
Manchester Metropolitan University Information Security Strategy 2017-2019 Document Information Document owner Tom Stoddart, Information Security Manager Version: 1.0 Release Date: 01/02/2017 Change History
More informationA practical approach towards Big Data in the context of the upcoming EU data privacy and data protection regulation.
A practical approach towards Big Data in the context of the upcoming EU data privacy and data protection regulation SAS Forum 2015 Privacy What s ongoing? Safe Harbour EU - GDPR White house NL Data Breach
More information