Kiosk Solutions Feb-Mar 2018 | Page 22

GDPR C M impact cyber breaches can have on its employees and customers. Preparing to succeed Identity management is just one example that allows companies to restrict access to certain resources within a system. Identity management can define what users can accomplish on the network depending on varying factors including the person’s location and device type. With the rise in cloud computing among businesses, extra measures should also be taken to safeguard this data. A survey found that 41% of businesses were using the public cloud for their work, with 38% on a private cloud network. By implementing security measures like encryption software, businesses can prevent unauthorised access to digital information. Taking these precautionary steps is necessary for businesses with more 22 KIOSK solutions than 250 employees. This is because a business of this size, following the introduction of GDPR, must detail what information they are collecting and processing. This includes how long the information will be stored for and what technical security measures are in place to safeguard the information. In addition to identity management and encryption software, businesses can also consider various other security tools for their systems, including anti- ransomware, exploit prevention and access management. Another notable change for companies that have regular and systematic monitoring of individual data, or process a vast amount of sensitive personal data, is that they will now be required to employ a data protection officer (DPO). Sensitive data refers to genetic data and any personal information such as religious and political views. The impact of GDPR GDPR will have a wide-ranging impact on multinational businesses. Although some may be more prepared than others, each business’ status in complying with GDPR is different, with no one solution suiting all. It’s fair to say that the GDPR is the most meaningful change in data privacy law since it was first established over twenty years ago. Despite it currently only being enforced in the EU, many believe this will spark a revolution across the globe for the protection of data for individuals. Businesses must prioritise updating their current systems to ensure their processing policies are compliant with the GDPR. Depending on the current position of a business, some may need more preparation than others. For example, not every business will be required to employ a DPO, but others may need to reorganise its HR team to help enforce GDPR compliance across a company. With May just around the corner, businesses that haven’t already started preparing need to act now to avoid financial punishments and reputation repercussions. n Y CM MY CY CMY K