In May 2016, EU GDPR (European Union General Data Protection Regulation), was signed into law to provide more privacy and control for people based in the EU.The GDPR is unprecedented and complex legislation. It will have a dramatic impact on how global firms process the personal data of EU residents.
GDPR does not just impact European firms. Organizations outside the EU will need to comply with the GDPR if they control or process ANY EU residents personal data.
If you have not already read the regulation, be prepared for a long read. The GDPR consists of 99 Articles, categorized in 11 Chapters.
Having a clear understanding of what personal data of European residents you collect and how you process it is the key to complying with this complex regulation.
One of the main difficulties for firms is to get full visibility how they currently handle personal data.
Questions to consider include:
If you answered “I don’t know” to an of these questions then a A GDPR Readiness Assessment would be of great benefit to your organization.