Set Your GDPR Countdown Clock this Valentine’s Day

Roses are red

Violets are blue

I love my data

And so should yous

Valentine’due south Day marks 100 days until the European union GDPR comes into enforcement – news that is likely to set some people’s hearts racing…and not in a good fashion! But May 25, 2018, is a date we all need to keep close to our hearts.

Allow’due south be honest with each other, regulation is never something y’all’re going to fall in love with. However, it is the push we all need to go us to pay attention to what matters most: our data. That information is the lifeblood of your system, representing the people in your employ that allow the business to thrive and the lives of the customers that your business serves. The loftier-profile data breaches of 2017 showed us all how vulnerable this information and your people truly are.

The GDPR countdown provides a timely push for all of us to do more to protect the privacy of the people that thing most; it is the perfect opportunity to show them how much you care. After all, by protecting the people y’all secure the organization.

100 days does non sound similar a lot of fourth dimension, but it’s not too late – most organizations will exist well on the style to putting in identify the processes and security measures that the regulation requires. 100 days is the perfect opportunity to bank check your progress to meet if y’all are on track as you put the terminal pieces of your strategy in place.

With three months to go, here are a pick of manus-picked reminders as you motility towards the end of the GDPR countdown:

1. Review the relationships with your suppliers and application providers. Are they protecting the information that you are asking them to process? How will they notify you if they suffer a breach? Consider that your data may exist held within a cloud application – yous will demand to approach your cloud awarding providers too.
2. Consider whether you need to appoint a Data Protection Officeholder, or a DPO. This person will take responsibility for data protection compliance in your organization.
3. Consider how you might inventory your data. Y’all may well place pockets of data that y’all did not know you had. Consult our guide, “The Demand To Inventory Personal Information” , to help identify solutions that will help in this try.
4. Evaluate how well you have mapped your data flows. GDPR expects organizations to understand non only where data is stored, merely too where data is being used and transmitted. Our helpful “Information Flow Mapping and Control” guide references the regulation text and offers some tips.
5. Should the inevitable happen and y’all need to respond, and recover, to a breach within tight time constraints “Find & Respond to a Data Incident” explains how the NIST framework can bespeak you in the right direction.

These reminders are non exhaustive. Your Supervisory Authority volition probable accept many guides that you tin human action upon. The Forcepoint GDPR Resource Pack will also help.

GDPR and regulations like it are a serious business, but that doesn’t mean y’all should embrace GDPR only because you accept to…comprehend information technology because you lot want to!