Data protection has become a global hot topic since the General Data Protection Regulation (GDPR) took effect on May 25th last year. On the 22th of May 2019 the European Commission has published an infographic on compliance with and enforcement of the GDPR since from May 2018 to May 2019 and it is clear that a lot of work still needs to be done. Let’s very briefly recall what GDPR is and some of its key concepts, before discussing about steps and security controls that will bring your organization one step closer to compliance.
1. What is the General Data Protection Regulation?
Millions of people daily entrust their personal data and information to various entities, and with information sharing occurring virtually everywhere, at retail shops, healthcare centers, gyms, financial institutions or websites, typically these people don’t know where their data goes or what other processing is done on it and by who. GDPR is designed to bring an up-to-date approach to privacy and security into Europe, with its aim being to provide EU citizens with a stronger control on the personal information they share with other entities, and to enforce to all member-states of the European…
