Understand and Achieve GDPR Compliance
The General Data Protection Regulation, or GDPR, was developed to bring legal unification and clarity to the protection of EU citizens’ personal data. Many organizations, however, are unaware of how personal data is defined under GDPR, what they need to do to achieve GDPR compliance, or if they even need to comply at all.
The GDPR’s definition of ‘personal data,’ however, is incredibly broad. Home addresses, names, birthdays, photos and even social media posts are all considered Personally Identifiable Information, or PII, as defined under GDPR.
GDPR also gives an EU citizen the right to know what PII is being collected, why it’s being collected, and how it’s being used. And if they so choose, EU citizens can require data controllers to transfer, surrender and even delete their PII.
With the deadline fast approaching (May 24, 2018), the International Commissioner’s Office (ICO) will require any company doing business with individuals located in the EU to demonstrate they have numerous controls in place to protect EU citizens’ privacy, or face steep fines. Unless these organizations are able to locate, secure and demonstrate the necessary data privacy controls, they won’t achieve GDPR compliance.
Achieve GDPR Compliance with Support from the Kiteworks Platform
With the Kiteworks secure file sharing and governance platform, organizations and their Data Protection Officers (DPOs) can see where their content resides and securely share it beyond their enterprise borders, while maintaining all the controls and audit details required to achieve GDPR compliance.
Whether customer data resides in on-premises or cloud-based systems, organizations can maintain full control and visibility over all the customer PII distributed across the enterprise. This includes data stored in Enterprise Content Management (ECM) platforms like Microsoft SharePoint and OpenText, cloud-based repositories like SharePoint Online, Dropbox and Box, or critical business applications such as SAP, Oracle, or Salesforce.
The Kiteworks platform further supports global enterprises in their efforts to achieve GDPR compliance by allowing these organizations to assign role-based policy controls and privileges to ensure that only authorized users have access to sensitive content. Lastly, the Kiteworks platform provides logs and reports which create a transparent trail that auditors and industry regulators can use to track file transfers, shares, views, downloads and deletions.
With Kiteworks’ integrated governance framework around the systems that hold your sensitive content, CISOs have full visibility into all file activity, including who is accessing, sharing, or receiving data, while maintaining all the controls necessary to protect EU citizens’ personal data and achieve GDPR compliance.
The General Data Protection Regulation, or GDPR, was developed to bring legal unification and clarity to the protection of EU citizens’ personal data. Many organizations, however, are unaware of how personal data is defined under GDPR, what they need to do to achieve GDPR compliance, or if they even need to comply at all.
The GDPR’s definition of ‘personal data,’ however, is incredibly broad. Home addresses, names, birthdays, photos and even social media posts are all considered Personally Identifiable Information, or PII, as defined under GDPR.
GDPR also gives an EU citizen the right to know what PII is being collected, why it’s being collected, and how it’s being used. And if they so choose, EU citizens can require data controllers to transfer, surrender and even delete their PII.
With the deadline fast approaching (May 24, 2018), the International Commissioner’s Office (ICO) will require any company doing business with individuals located in the EU to demonstrate they have numerous controls in place to protect EU citizens’ privacy, or face steep fines. Unless these organizations are able to locate, secure and demonstrate the necessary data privacy controls, they won’t achieve GDPR compliance.
Achieve GDPR Compliance with Support from the Kiteworks Platform
With the Kiteworks secure file sharing and governance platform, organizations and their Data Protection Officers (DPOs) can see where their content resides and securely share it beyond their enterprise borders, while maintaining all the controls and audit details required to achieve GDPR compliance.
Whether customer data resides in on-premises or cloud-based systems, organizations can maintain full control and visibility over all the customer PII distributed across the enterprise. This includes data stored in Enterprise Content Management (ECM) platforms like Microsoft SharePoint and OpenText, cloud-based repositories like SharePoint Online, Dropbox and Box, or critical business applications such as SAP, Oracle, or Salesforce.
The Kiteworks platform further supports global enterprises in their efforts to achieve GDPR compliance by allowing these organizations to assign role-based policy controls and privileges to ensure that only authorized users have access to sensitive content. Lastly, the Kiteworks platform provides logs and reports which create a transparent trail that auditors and industry regulators can use to track file transfers, shares, views, downloads and deletions.
With Kiteworks’ integrated governance framework around the systems that hold your sensitive content, CISOs have full visibility into all file activity, including who is accessing, sharing, or receiving data, while maintaining all the controls necessary to protect EU citizens’ personal data and achieve GDPR compliance.
To learn more about how the Kiteworks platform can support your organization’s efforts to achieve GDPR compliance, schedule a custom demo of Kiteworks today.
Additional Resources