For Data Protection Purposes, We are All European Citizens

calendar03/07/2016
clock 1 min read
feature image

I recently had the opportunity to author an article for CMSWire about how the European Union (EU) General Data Protection Regulation (GDPR) will have effects that reach beyond just the EU.

In addition to EU-based organizations, companies with a significant European presence will also be subject to the new requirements (e.g., greater fines for data breaches, privacy impact assessments)

Although organizations may have about two years to come into compliance, it’s time to rethink privacy and security strategy now– especially as it relates to IT.

The new GDPR IT requirements will likely mean a significant shift in organizational processes, so it’s important to consider how the new law will affect your IT and business practices. Some considerations:

  • Are your standardized processes automated?
  • Are you conducting privacy impact assessments to analyze risk?
  • Are you taking a risk-based approach to data protection?
  • Do your policies demonstrate accountability?

Answering these questions will help guide you to proactively ensure compliance with the EU GDPR.

To read more about the global implications of the EU GDPR, please visit CMSWire.

To learn how AvePoint can help your organization with compliance management, please visit our website.

author

Dana Simberkoff

Dana Louise Simberkoff is the Chief Risk, Privacy and Information Security Officer at AvePoint. She oversees a global team of subject matter experts who monitor industry trends, emerging technologies, and best practices in risk management and compliance. Dana also provides strategic guidance on product direction, technology enhancements, customer challenges, and market opportunities, partnering closely with internal and external executive stakeholders. Dana is an industry leader, previously serving on the Education Advisory Board for the International Association of Privacy Professionals (IAPP) and as a founding member of the Women Leading Privacy Advisory Board. Dana has been featured in the Wall Street Journal, Forbes, Security Magazine and more, and is consistently recognized by organizations like IDC and CSO as an influential woman in cybersecurity. Dana holds a Bachelor of Arts degree from Dartmouth College and a Juris Doctor from Suffolk University Law School.