Consent must be collected to use data for specific purposes, as opposed to a blanket written agreement and upon request by individuals, companies must also erase personal data. Compliance with the existing Data Protection Act will ensure a level of compliance has already been achieved.
What is GDPR Compliance?
What is GDPR?
Are you compliant?
Aim of GDPR
Companies must limit the time they retain data, and minimise the content collected.
Data should be able to be exported in a format which enables individuals to forward to other service providers.
Key questions to address:
What is sensitive data?
Where is the data located, stored?
How long do we hold the data?
Who has access?
How is it mapped?
When is data transferred?
How is data managed?
Ability for companies to identify data records from EU citizens
Locating customer data across disparate systems
Defining the purpose of storing the data
Identifying / ensuring a single owner of data management and compliance
Ensuring compliance is monitored and potential breaches identified, with awareness raised
We are data evangelists
How can we help?
Want to know more? Let’s grab a coffee and have a chat…