GDPR: A simple explainer

Minimalist · Mar 24, 2017

The General Data Protection Regulation (GDPR) is the biggest change in data protection laws for 20 years, and when it comes into effect on May 25th, 2018, it intends to give European citizens back control over their personal data. Its impact won’t just be felt in Europe though, as it will have wider implications for companies across the world that hold data on the continent.
While great news for individuals, it presents complex problems for companies. As a case in point – they could face fines running into tens of millions of Euros if they breach the new directive. With that in mind, we’ve put together this simple explainer to answer the key questions.
Click to expand...

http://www.welivesecurity.com/2017/03/24/gdpr-an-explainer/

zapjb · Mar 24, 2017

I hope those 2 paragraphs are true & come to pass.

Minimalist · May 4, 2017

European businesses not seeking help from the security industry ahead of GDPR

European research by PAC and Reliance acsn has outlined the challenges and concerns that security professionals across Europe are facing and how they approach the serious issue of outsourcing functions. One of the key findings of the report was that compliance and GDPR were not seen as important reasons for employing third party security firms, despite the need for detailed knowledge to comply with regulations.
Click to expand...

https://www.helpnetsecurity.com/2017/05/04/mssp-gdpr-compliance/

Minimalist · May 23, 2017

Is the world ready for GDPR? Privacy and cybersecurity impacts are far-reaching

On May 25th, in the year 2018, something called the General Data Protection Regulation (GDPR) will go into effect. That means your company, and every other company in the world, should already have a good answer to this question: “How will GDPR affect us?” In fact, I would argue that you are currently courting danger if your answer is either “I don’t know” or “it doesn’t affect us because we’re not a European company” or “GDPR is irrelevant to us because we are located in America/Australia/India/etc.”
The main danger that you are courting is a big fat fine for non-compliance with GDPR, a set of rules governing the privacy and security of personal data that is being implemented by the European Commission, but which DOES APPLY to some companies located outside the European Union (EU).
In this article I have outlined why GDPR could have serious implications for your organization, starting with a few words about the wide net that this law casts, far beyond the borders of the EU. I will end with links to resources that can help you prepare for GDPR.
Click to expand...

https://www.welivesecurity.com/2017/05/23/gdpr-is-world-ready-cybersecurity-impact/

Minimalist · May 25, 2017

UK IT Leaders: GDPR Will Drive Up Prices for Customers

With exactly one year to go until the GDPR compliance deadline, UK firms are the most pessimistic about its impact on the business, according to a new global study from Varonis Systems.

The cybersecurity vendor polled 500 IT decision makers in the UK, US, France and Germany to better understand their attitudes to the sweeping new privacy law set to land on 25 May 2018.

Over half (56%) of UK respondents said they thought the GDPR would force their firm to increase prices for their customers and add more complexity for IT teams.

In addition, nearly a quarter (22%) said they see no benefit to their business from the tighter data protection requirements it stipulates, while just a third (37%) said they thought it would actually reduce breaches.

In the US, the latter figure was 53%.
Click to expand...

https://www.infosecurity-magazine.com/news/uk-it-leaders-gdpr-will-drive-up/

Minimalist · May 29, 2017

New perspectives on cyber security: The regulatory challenge

Cyber security is a rapidly evolving sector. Oftentimes, regulatory frameworks lag behind the latest developments. And when legislators finally act, companies, institutions and other influencing stakeholders must be fully aware of newly implemented regulations. In 2018, the new European Union (EU) regulation on data, cyber and information security will be a game changer. Here’s why.
Click to expand...

http://globalriskinsights.com/2017/05/new-perspectives-cyber-security-regulatory-challenge/

Minimalist · May 30, 2017

With Less Than 1 Year To Go Companies Place Different Priorities on GDPR Compliance

It feels like Y2K all over again. We are less than one year until the impact of the GDPR is realized, no one is certain what will happen, and everyone is taking a different approach to mitigation.
Click to expand...

http://securityaffairs.co/wordpress/59545/laws-and-regulations/gdpr-deadline.html

Minimalist · Jun 16, 2017

GDPR: New data laws will drive a more democratic form of advertising

The digital era of advertising is data-driven, but to be successful a business doesn’t need its own data. Obviously it helps, but it’s certainly not essential.

To run a successful digital ad campaign, a business can target customers using audiences from a third party data provider.
Click to expand...

http://www.cityam.com/266753/gdpr-new-data-laws-drive-more-democratic-form-advertising

Minimalist · Jul 4, 2017

GDPR: who needs to hire a data protection officer?

Many headlines have been written about the sanctions for contraventions (up to €20m or 4% of an organisation’s annual global turnover) and about changes to such concepts as consent, accountability, and data subjects’ rights, but what has perhaps been rather overlooked is that it will introduce a statutory basis for a role that has until now only ever really had an informal status – the data protection officer (DPO).
Click to expand...

https://nakedsecurity.sophos.com/2017/07/04/gdpr-who-needs-to-hire-a-data-protection-officer/

Minimalist · Jul 5, 2017

GDPR: 12 steps businesses can use to prepare right now

In this podcast, Darron Gibbard, Chief Technical Security Officer, EMEA, Qualys, talks about preparing for the GDPR and provides a good basis to start your program and understand what departments you need to be working with, and how you should be engaging with your respective businesses.
Click to expand...

https://www.helpnetsecurity.com/2017/07/05/gdpr-prepare/

Minimalist · Jul 12, 2017

GDPR and CCTV

The GDPR will require a wholesale reassessment of data protection for the UK’s millions of CCTV cameras, which so far have gained from relatively light touch regulation. However, that General Data Protection Regulation (due to come into effect next year) will enable the sector to enhance its public image and create opportunities for new valued-added services. This is according to a paper from a cloud-based video surveillance company.
Click to expand...

http://www.professionalsecurity.co.uk/news/commercial-security/gdpr-and-cctv/

Minimalist · Jul 12, 2017

GDPR is Stifling Innovation, Says Infosec Community

The impending General Data Protection Regulation (GDPR) is stifling innovation in the cybersecurity industry, according to a survey carried out by AlienVault.

The firm quizzed over 900 attendees at Infosecurity Europe in June this year, and found that 49% of respondents felt the threat of GDPR fines made them more nervous of using cloud-based apps and services.

What’s more, half of those polled also believed that GDPR could cause people to try and cover up data breaches.
Click to expand...

https://www.infosecurity-magazine.com/news/gdpr-is-stifling-innovation-says/

Minimalist · Aug 7, 2017

UK Writes GDPR into Law with New Data Protection Bill

The pressure is now on for UK organizations to comply with the EU’s General Data Protection Regulation (GDPR) after the government announced its intention to write the legislation officially into law in the form of a new Data Protection Bill.

The proposed bill will upgrade the UK’s privacy laws for the digital age, providing consumers with sweeping new rights while mandating strict requirements on businesses which handle their data.
Click to expand...

https://www.infosecurity-magazine.com/news/uk-writes-gdpr-into-law-data/

Minimalist · Aug 7, 2017

The Guardian view on data protection: a vital check on power

There are three different interests in data and privacy which have to be brought into balance: the individual, the companies which hold and process our data, and the state, which mediates between the two. There is a fundamental asymmetry between the individual and the other two, in that the personal data of any particular customer is worth in isolation very little to anyone else, but the aggregation and refinement of data gives it a huge new value. It should be the aim of policy to ensure that no one is disadvantaged by having their data processed in this way.
Click to expand...

https://www.theguardian.com/comment...iew-on-data-protection-a-vital-check-on-power

Minimalist · Aug 14, 2017

Fines of £17m for unprotected UK firms

The UK Government’s Department of Digital, Culture, Media and Sport (DCMS) has announced that firms could face fines of up to £17m or 4% of global turnover if they fail to protect themselves from cyberattacks.

The introduction of such financial penalties will be carried out by the data protection regulator, Information Commissioner’s Office (ICO), following the introduction of a new Data Protection Bill.
Click to expand...

https://www.welivesecurity.com/2017/08/14/fines-17m-unprotected-uk-firms/

Minimalist · Aug 29, 2017

Is the EU Taking Sides? New Privacy Law Hits Facebook Harder Than Google

Surely the European Union didn’t mean to choose sides between Facebook and Google, two giants of the U.S. digital economy that dominate their European rivals. Yet that’s precisely what Europe’s new privacy law – the General Data Projection Regulation (GDPR) – does. One might have expected a collective American cry about EU meddling in the U.S. economy. But the new law is so new, so onerous and so complex that the wider world hasn’t yet appreciated just how much Europe has tilted the playing field against Facebook and in favor of Google.
Click to expand...

https://www.forbes.com/sites/valley...-privacy-law-hits-facebook-harder-than-google

Minimalist · Aug 31, 2017

UK Firms on GDPR Hiring Spree but Gaps Persist

Only two-thirds of UK firms are set to hire new permanent employees to deal with EU data protection laws coming next year, as several new reports reveal ongoing gaps in compliance.

Recruiter Robert Half polled 400 UK directors to find 66% were planning to bring in permanent and 64% temporary staff.
Click to expand...

https://www.infosecurity-magazine.com/news/uk-firms-gdpr-hiring-spree-gaps/

Minimalist · Aug 31, 2017

If You Use SaaS Products, You Need To Prepare For GDPR. Here's How.

The rise of software-as-a-service offerings has delivered countless benefits to modern businesses, from greater agility and flexibility to cost savings to scalability and beyond. But the very ease and accessibility of SaaS solutions make it a slippery slope for IT and compliance departments.

You know you have a significant SaaS stack, both accounted for and in the shadows, but you can’t exactly pinpoint the location of every license, application, and piece of data. You can guess, but you’ll probably undershoot it; by one estimation, the average enterprise organization was using 928 cloud apps, but most CIOs think their organization only uses around 30 or 40 cloud applications. That’s a significant gap.

The discrepancy between your known quantity of SaaS apps and the reality of your cloud ecosystem is concerning in any circumstances. Most medium and large businesses waste a serious amount of money on unused, underused, or unmanaged licenses and subscriptions. But the pending enforcement of GDPR represents a new and particularly pressing impetus to gain a clear, comprehensive understanding of what you have and where it lives. Poorly managed SaaS accounts may cost you thousands of dollars; failure to comply with GDPR can cost millions.
Click to expand...

https://www.forbes.com/sites/ciocen...oducts-you-need-to-prepare-for-gdpr-heres-how

Minimalist · Sep 6, 2017

UK Firms: GDPR Fines Don’t Bother Us

A Trend Micro study of 1000 IT decision makers from across the globe revealed that while 100% of UK respondents are aware of the EU General Data Protection Regulation (GDPR), 73% are unaware of the extent of GDPR fines and a quarter claimed a fine wouldn’t bother them.

That betrays a lack of understanding of the potentially punitive fines regulators will be able to level from May 25 2018, with the maximum penalty standing at £17m, or 4% of global annual turnover.
Click to expand...

https://www.infosecurity-magazine.com/news/uk-firms-gdpr-fines-dont-bother-us/

Minimalist · Sep 13, 2017

37 Percent of Global Organizations Unsure if They Need to Comply with GDPR

WatchGuard Technologies, a leader in advanced network security solutions, today announced the results of a global survey that explores how well organizations understand Europe's General Data Protection Regulation (GDPR) and their readiness for its fast approaching compliance deadline. The findings indicate widespread confusion about GDPR compliance criteria and an overall lack of preparation. The survey examines the views of more than 1,600 organizations across the globe and was conducted by independent market research firm, Vanson Bourne.
Click to expand...

http://it.tmcnet.com/news/2017/09/13/8610804.htm

Minimalist · Sep 16, 2017

UK’s Data Protection Bill Contains Exemptions

The UK government today published a Data Protection Bill designed to enshrine the EU GDPR into domestic legislation to minimize disruption to businesses post-Brexit.

The proposed law includes some exemptions which the government claims will help “prevent and detect fraud, protect the freedom of the press, allow scientific research and maintain the integrity of professional sports.”

Specifically, journalists will be allowed to process data to expose wrongdoing, anti-doping agencies will be able to process data to catch sporting drug cheats and financial institutions will still be allowed to price risk or process data if there’s a suspicion of terrorist financing or money laundering.

Exemptions also apply to certain scientific and historical research organizations like universities and museums, and for employees who access sensitive data without consent but to fulfill employment law obligations.
Click to expand...

https://www.infosecurity-magazine.com/news/uks-data-protection-bill-contains/

Minimalist · Oct 5, 2017

Beyond GDPR: Data protection as a competitive advantage

A new McAfee report shows that 48 percent of organizations will migrate their data to a new location because of regulations like GDPR. A similar amount will migrate their data because of changing geopolitics or the approach to relevant policies in the United States.
Seventy percent of respondents believe the implementation of GDPR will make Europe a world leader in data protection; however, the United States remains the most popular data storage destination, preferred by nearly half of all organizations surveyed.
Click to expand...

https://www.helpnetsecurity.com/2017/10/05/beyond-gdpr/

Minimalist · Nov 6, 2017

Businesses and GDPR: What they need to do to be compliant?

Enforcement of General Data Protection Regulation (GPDR) is now just few months away. The media have intensively examined and written about this topic from practically every angle since it became legislation. Businesses continue to struggle with both understanding and implementation of what they need to do to be compliant.
WeLiveSecurity sat down with ESET’s Global Security Evangelist, Tony Anscombe, to better understand the essentials of GDPR .
Click to expand...

https://www.welivesecurity.com/2017/11/06/businesses-gdpr-compliant/

ronjor · Nov 17, 2017

We're Still Not Ready for GDPR? What is Wrong With Us?

Sara Peters 11/17/2017
The canary in the coalmine died 12 years ago, the law went into effect 19 months ago, but many organizations still won't be ready for the new privacy regulations when enforcement begins in May.
Click to expand...

Minimalist · Nov 28, 2017

Microsoft Launches Compliance Manager To Help Customers Achieve GDPR Compliance

Compliance Manager is a new tool offered as part of Microsoft 365 that helps assess and manage compliance risk. A Microsoft blog post describes it, “Compliance Manager is a cross–Microsoft Cloud services solution designed to help organizations meet complex compliance obligations like the GDPR. It performs a real-time risk assessment that reflects your compliance posture against data protection regulations when using Microsoft Cloud services, along with recommended actions and step-by-step guidance.”
Click to expand...

https://www.forbes.com/sites/tonybr...ger-to-help-customers-achieve-gdpr-compliance

Log in or Sign up

GDPR: A simple explainer

Minimalist Registered Member

zapjb Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Log in or Sign up

GDPR: A simple explainer

Minimalist Registered Member

zapjb Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Useful Searches