Privacy impact assessment tools serve multiple purposes in IT security. One is compliance with industry and location-based regulations. The EU’s General Data Protection Regulation (GDPR) exists to identify and minimize risks to personally identifiable information (PII) of EU citizens. It necessitates routine assessments from all entities that interact with EU citizens’ PII. A privacy impact assessment, tool-assisted or otherwise, is one way to ensure GDPR compliance. (more…)

The European Union’s (EU) General Data Protection Regulation (GDPR) enumerated individuals’ data privacy and protection rights, established regulations for organizations to comply with, and introduced sweeping operational changes. Any US-based organization that interacts with or processes data belonging to citizens of EU member states must comply with the GDPR.  (more…)

Companies interacting with European Union (EU) member states need to protect individual citizens’ data per the General Data Protection Regulation (GDPR). The GDPR breaks down specific rights for data subjects and the responsibilities that the entities processing or controlling their data must meet. If a data breach occurs, organizations must comply with GDPR notification requirements. (more…)

Citizens of European Union (EU) member states enjoy robust personal data protection rights. These rights are defined in the EU General Data Protection Regulation (GDPR), which any business that processes or comes into contact with EU citizens’ data must follow. (more…)

The EU’s General Data Protection Regulation (GDPR) is one step in the crusade to strengthen citizens’ fundamental rights in the digital age. Therefore, it’s essential for companies to abide by GDPR when handling EU and EEA citizens’ private data. Failure to do so results in severe ramifications.  (more…)

What separates the General Data Protection Regulation (GDPR) from its predecessors is its ability to recognize how the data landscape has changed over the past two decades. One way the regulation has accomplished that is by combining privacy protection with modern-day data processing techniques. And it has done so primarily through its recognition of special categories of data. The GDPR  Special Categories of Data is a subsection of personal data that regulators have deemed as extra sensitive. This subsection of personal data requires additional security measures that ensure the privacy of the subject being processed.

(more…)

There is a special feeling when launching a new project. It is exciting, a little nerve-racking, but always bursting with potential.

Your company might be going through a similar process and feeling. But you might be unsure about the privacy implications. You might wonder, is a DPIA required under GDPR?

(more…)

Issuing a sell-by-date on food products protects consumer health. Issuing a data deletion policy protects consumers’ privacy.

Many businesses are asking:  how long can you store data under GDPR?  Like the regulation regarding sell-by-dates, EU regulators have stated that the personal data you hold must have a shelf-life. 

(more…)

Reaching a level of “privacy by design and default” does not have to be an uphill battle for your organization. By implementing the tools and outlined by the GDPR, ascending to higher levels of data protection becomes achievable. 

(more…)