Preface. Operations within the EU. Serving the EU customers. Third parties operating in the EU

Similar documents
EU General Data Protection Regulation (GDPR) A Point of View for Technology Sector Organisations. For private circulation only.

Privacy and Data Protection Draft Personal Data Protection Bill 2018: A Summary. For Private Circulation Only August 2018.

Vulnerability Management. June Risk Advisory

Autobot - IoT enabled security. For Private circulation only October Risk Advisory

The Future of IT Internal Controls Automation: A Game Changer. January Risk Advisory

Multi-factor authentication enrollment guide for Deloitte client or business partner user

From Dabbling to Doing The Age of the Intuitive Enterprise

Cyber Security is it a boardroom issue?

MFA Enrollment Guide. Multi-Factor Authentication (MFA) Enrollment guide STAGE Environment

The New Healthcare Economy is rising up

Cyber Security: Are digital doors still open?

Adopting SSAE 18 for SOC 1 reports

#DeloitteInnovation: In-Time Uncover the Potential of SAP HANA

Customer Breach Support A Deloitte managed service. Notifying, supporting and protecting your customers through a data breach

Headline Verdana Bold. Internet of Things Cyber threat intelligence

Cyber Espionage A proactive approach to cyber security

CFOs in a new global environment Sandy Cockrell, Deloitte

Network methodologies that deliver higher speeds and greater capacity

#DeloitteInnovation: In-Time How efficiently do you use your SAP HANA?

Are we breached? Deloitte's Cyber Threat Hunting

Cyber Risk and Networked Medical Devices

Plan a Pragmatic Approach to the new EU Data Privacy Regulation

Incident Response. We ve had a privacy breach now what?

GDPR: A QUICK OVERVIEW

Emerging Technologies The risks they pose to your organisations

Data Protection. Practical Strategies for Getting it Right. Jamie Ross Data Security Day June 8, 2016

Real estate predictions 2017 What changes lie ahead?

Spiros Angelopoulos Principal Solutions Architect ForgeRock. Debi Mohanty Senior Manager Deloitte & Touche LLP

The Quest to Measure Strength of Function for Authenticators: SOFA, So Good

GDPR Privacy Webinar. Prioritizing Your Path towards GDPR Compliance Annika Sponselee and Nicole Vreeman 28 February 2018

The HIPAA Security & Privacy Rule How Municipalities Can Prepare for Compliance

Building and Testing an Effective Incident Response Plan

Anticipating the wider business impact of a cyber breach in the health care industry

Achieving third-party reporting proficiency with SOC 2+

Introduction. When it comes to GDPR compliance, is OK for now enough? Minds made for protecting financial services

Creating your own payment card Joost Kremers MSc CEH

Headline Verdana Bold

Global Mobile Consumer Survey, US Edition Overview of results

Spread your wings Professional qualifications and development at Deloitte. What impact will you make? careers.deloitte.com

HOMEPAGE. Start here to find content via search Login, register, or subscribe. Quick links to content

Error! No text of specified style in document.

The impact of digital transformation on industries

The GDPR Are you ready?

Cybersecurity Protecting your crown jewels

Risk-based security in practice Turning information into smart screening. October 2014

MassMEDIC s 21st Annual Conference

CIPP/E CIPT. Data Protection Technologist (DPT) Training Bundle Official IAPP Training and Certification

Deloitte Discovery Caribbean & Bermuda Countries Guide

Bharath Chari Cyber Risk Sr. Manager, Deloitte & Touche LLP

Building Resilience to Denial-of-Service Attacks

13.f Toronto Catholic District School Board's IT Strategic Review - Draft Executive Summary (Refer 8b)

Deloitte Global Mobile Consumer Survey India data, 2015

BHConsulting. Your trusted cybersecurity partner

Managing Cyber Risk. Robert Entin Executive Vice President Chief Information Officer Vornado Realty Trust

Achieving effective risk management and continuous compliance with Deloitte and SAP

Cloud Computing Overview. The Business and Technology Impact. October 2013

Aon Service Corporation Law Global Privacy Office. Aon Client Data Privacy Summary

The Deloitte-NASCIO Cybersecurity Study Insights from

Risk Advisory Academy Training Brochure

Cybersecurity Fortification Initiative (CFI) infrastructure whitepaper

Cyber Risk Services Going beyond limits

Cyber Security Incident Response Fighting Fire with Fire

Deloitte Shared Services Conference 2018 Lab: Scaling RPA David Wright, Kim Burton, Dupe Witherick and Marina Gordeeva, Deloitte

Demonstrating data privacy for GDPR and beyond

Contact us What makes us different Dinesh Anand Our offices Forensic Bangalore Kolkata Cutting-edge technology to deliver more efficiently Services

Webcast title in Verdana Regular

Strategic threat advisory services

BHConsulting. Your trusted cybersecurity partner

Design by Privacy: A holistic approach to privacy by design

Industrial control system (ICS) security

Standing Together for Financial Industry Resilience Quantum Dawn 3 After-Action Report. November 19, 2015

Protection of clients information in the age of IT ECBA Spring Conference Prague 2017 Jan Balatka, Analytic & Forensic Technology

Fundamentals of Cybersecurity/CIIP. Building Capacity: Using a National Strategy & Self-Assessment

Step 1: Open browser to navigate to the data science challenge home page

CitiManager. Registering for CitiManager, Enrolling in Paper-Free Statements, and Viewing Your Electronic Statement

General Data Protection Regulation. May 25, 2018 DON T PANIC! PLAN!

Developing Issues in Breach Notification and Privacy Regulations: Risk Managers Are you having the right conversation with the C Suite?

Multi-factor authentication enrollment guide for Deloitte practitioners

Cyber risk Getting the boardroom focus right

ICT Legal Consulting on GDPR: the possible value of certification in data protection compliance and accountability

Título de portada NIVEL 1

Assessing Cyber Risk: Critical questions for the board and the C-suite

GDPR AMC SAAS AND HOSTED MODULES. UK version. AMC Consult A/S June 26, 2018 Version 1.10

The Role of the Data Protection Officer

Where provided, the names and addresses of post holders within Public Bodies, Public Service Providers and Limited Companies.

Deloitte Forensic Caribbean & Bermuda Countries Guide

The value of visibility. Cybersecurity risk management examination

Cybersecurity: balancing risks and controls for finance professionals

CYBER INSURANCE: MANAGING THE RISK

Cyber Incident Response. Prepare for the inevitable. Respond to evolving threats. Recover rapidly. Cyber Incident Response

Standing Together for Financial Industry Resilience Quantum Dawn IV after-action report June 2018

2018 Data Security Incident Response Report Building Cyber Resilience: Compromise Response Intelligence in Action

In Accountable IoT We Trust

USER MANUAL OF THE APP. I. Access to the APP II. Profile III. Advanced scan: additional features IV. GDPR functionality: Pop-up V.

ISAE 3402 and SSAE 16 (replacing SAS 70) Reinforcing confidence through demonstration of effective controls

Financial institutions in the new regulatory environment. Giam Ei Leen, Southeast Asia Risk & Regulatory Advisory Leader, Deloitte Southeast Asia

Canadian Anti-Spam Legislation (CASL) Campaign and Database Compliance Checklist

P11D. System Integrators Guide

Q&A for Citco Fund Services clients The General Data Protection Regulation ( GDPR )

Robert Bond. Respecting Privacy, Securing Data and Enabling Trust a view from Europe

Transcription:

Cyber Risk

EU General Data Protection Regulation (GDPR) I A Point of View for Global In-house Centres (GICs) in India Preface Does the EU GDPR impact organisations in India? Yes! This new law will have a profound impact on the operational and control environment of the organisations, not only within EU but also within the organisations based outside the EU having: Operations within the EU Third parties operating in the EU Serving the EU customers This is a border less and sector neutral legislation. It goes beyond EU to organisations offering goods or services to customers in EU, organisations that monitor the (online) behavior of the EU customers and during these services such organisations access/process/host/ store personal data of EU customers. With enforcement date approaching fast (25 May 2018), organisations are recommended to quickly assess GDPR s applicability and initiate readiness journey at the earliest. Note: Map on this slide is only for the representation purposes. 3

EU General Data Protection Regulation (GDPR) I A Point of View Key contacts National Rohit Mahajan Partner & National Leader Risk Advisory rmahajan@deloitte.com Shree Parthasarathy National Leader sparthasarathy@deloitte.com Regional A.K. Viswanathan Mumbai Priti Ray Mumbai & Kolkata Abhijit Katkar Mumbai Maninder Bharadwaj Bangalore Ramu Narsapuram Hyderabad Ashish Sharma Pune Ravi Veeraraghavan Chennai Gaurav Shukla Bangalore & Hyderabad Gautam Kapoor Gurgaon Praveen Sasidharan Bangalore & Chennai Munjal Kamdar Mumbai National Privacy Centre of Excellence Vishal Jain National Privacy Lead Mumbai jainvishal@deloitte.com Manish Sehgal Director Risk Advisory National Solution Director for Privacy Gurgaon masehgal@deloitte.com 14 Headline Open Sans Bold Subheading Open Sans Light up to two lines of text Subtitle or date subtitle, date or author second line

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee ( DTTL ), its network of member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as Deloitte Global ) does not provide services to clients. Please see www.deloitte.com/about for a more detailed description of DTTL and its member firms. This material is prepared by Deloitte Touche Tohmatsu India LLP (DTTILLP). This material (including any information contained in it) is intended to provide general information on a particular subject(s) and is not an exhaustive treatment of such subject(s) or a substitute to obtaining professional services or advice. This material may contain information sourced from publicly available information or other third party sources. DTTILLP does not independently verify any such sources and is not responsible for any loss whatsoever caused due to reliance placed on information sourced from such sources. None of DTTILLP, Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively, the Deloitte Network ) is, by means of this material, rendering any kind of investment, legal or other professional advice or services. You should seek specific advice of the relevant professional(s) for these kind of services. This material or information is not intended to be relied upon as the sole basis for any decision which may affect you or your business. Before making any decision or taking any action that might affect your personal finances or business, you should consult a qualified professional adviser. No entity in the Deloitte Network shall be responsible for any loss whatsoever sustained by any person or entity by reason of access to, use of or reliance on, this material. By using this material or any information contained in it, the user accepts this entire notice and terms of use. 2017 Deloitte Touche Tohmatsu India LLP. Member of Deloitte Touche Tohmatsu Limited