Intelligent CIO Europe Issue 01 | Page 59

/////////////////////////////////////////////////////////////////////// FEATURE: DATA MANAGEMENT Get to terms with GDPR regulations In May 2018, the General Data Protection Regulation (GDPR) comes into force and European businesses are required to abide by the regulations set by the EU, or face serious consequences. E nterprises around the world are preparing to comply with GDPR, one of the strictest data privacy regulations in the world, when it comes into play on May 25th, 2018. Businesses throughout Europe should be aware that GDPR applies to companies worldwide, wherever they may be based, as long as they are handling data concerning European citizens. Those organisations collecting data or employing third parties to do so on their behalf will need to demonstrate their compliance with GDPR in regard to how they are exercising the requirements. GDPR also requires public authorities and businesses who process personal data to appoint a data protection officer to monitor its use. The regulations will require compulsory PIAs (Privacy Impact Assessments) to take place where there may be a high risk of a data breach and it is also a requirement to report data breaches to the local data protection authority within 72 hours of discovery. All software and systems will need to deal with stringent audit requirements, meaning they are required to amend and permanently www.intelligentcio.com INTELLIGENTCIO 59