The EU’s new General Data Protection Regulation is scheduled to take effect on May 25, 2018. Designed to serve as a uniform set of data protection laws within the EU, it will become law alongside the BDSG in Germany. This means that all affected companies will need to make extensive adjustments to the new legal landscape.
Here are the most important impending changes:
- Expanded executive responsibility
- Effective application of data protection law based on increased liability and fines
- “Privacy by design” and “privacy by default” will become basic principles of data protection law
- Data Protection Impact Assessments
- Expanded obligation to report data incidents
- Expanded documentation regulations (including with regard to information security management systems, or ISMS)
- Expanded citizens’ rights
- Modified role for data protection officers
Since there won’t be any transitional period as they take effect, you need to get your company ready for these new laws sooner rather than later.
“The data protection authorities are already preparing to intensify their auditing activities once the GDPR becomes law in May 2018,” warns Thomas Kranig, president of the Bavarian Data Protection Authority.
“Biding your time instead of getting ready for these changes is a very risky move.”
How is your Dynamics 365 environment doing?
Check out the free GDPR assessment tool provided by Microsoft:
https://assessment.microsoft.com/gdpr-compliance
You need help with this whole process to onboard your systems to support the GDPR?
Contact us:
https://www.audius.de/en/it-services/data-protection
Comments
Post a Comment