Privacy and data protection have never been more important. From anxious consumers to activist regulators, everybody seems to have data protection on their minds. The proliferation of regulations and the increasing complexity of data and IT architectures create challenges for organizations of all types. We at LogSentinel have collated a bundle of resources that can set you on the way to achieving GDPR compliance with no compromise.
How to Achieve GDPR Compliance in Your Organization?
Looking for tips on how to achieve broad compliance with privacy regulations in your organizations? Look no further – we have the top things to do in a neat list – 11 Tips to Achieve GDPR Compliance. To further prepare for the challenge of compliance, we have collected a list of tools and resources that will get you going towards leading a full-blown data protection program in you organization. You can check it out here – List of Tools And Sources That Will Help Your Business Achieve GDPR Compliance
GDPR and Data Processing
Deep understanding of all the data and processing that takes place is essential not merely for the General Data Protection Regulation compliance but also for management and business reasons. Yet, some companies struggle with fulfilling their obligation to record all processing activities in a separate register. We outline our take on achieving compliance with this – How to fulfill Art. 30 from GDPR (Records of processing activities)?
GDPR and PCI-DSS
Data protection is not necessarily a new thing for some organizations. Highly regulated industries such as Finance have long been subject to regulations and certifications. GDPR leverages some of those good practices and adds a further layer of rights for the data subject. However, if you already have a PCI-DSS certifications, you will see that there is also a sizable overlap. We briefly summarize the synergies between PCI-DSS and GDPR here – GDPR vs PCI DSS: How they complement each other
GDPR in 2020: Trends, Fines, Lessons Learnt
The risk of fines has never been higher. Moreover, a lot of companies are paying dearly for their lack of data protection. We have investigated the top reasons for such fines and given insight on how these can be avoided. Read about this here: The 2020 Alarming Trends in GDPR Fines and How to Avoid Them
GDPR and Consent Management
Consent management issues are also on the rise – despite many a legal opinion, practical difficulties still remain. This is especially true in edge cases such as the Facebook social plugins. We investigate the Court of Justice ruling in an attempt to navigate those murky waters – Facebook Social Plugins and GDPR: The Court of Justice Ruling
GDPR Logging Requirements
Logging has proven to a particular challenge when implementing information security and data protection programs. Yet it is crucial – in allows the controller to prove that all legal obligations are followed (e.g. consent, data subject rights requests, etc.) as well as to track suspicious activity inside and outside the organization. Our insight on the precise requirements and ideas to fulfil them can be found here – GDPR Logging Requirements
Privacy by Design in GDPR
The best privacy is the one that comes before problems can arise – at the stage of designing and conceptualizing a system. Both art. 25 of the General Data Protection Regulation enshrine this as data protection by design, as well as in good infosec practice. However, the challenge remains of how to apply those lofty principles in real life? We explore that further in Privacy by Design in Practice
Technical Aspects of the regulation
As with many things, it is true for data privacy that the proof is in the pudding. The ultimate success for the organization is having a set of business processes that support the operation of privacy-preserving information systems. The development of these is not for the faint of heart. We have thus prepared an extensive guide for implementation for developers with a deep dive into the nitty-gritty details that can be found here – GDPR – A Practical Guide for Developers. We have also summarized the key points for a top line overview – A presentation about GDPR for developers
GDPR and Data Protection Beyond EU
While the General Data Protection Regulation is a EU regulation, it still applies to international companies that operate in Europe or even merely process data of European citizens. Due to their sheer size and importance, US companies are particularly vulnerable to regulatory activism. We give a brief overview of what any US company must know and 10 items that must be high on the list of measures for them – What US Companies Need To Know About GDPR
GDPR and CCPA: The Role of Accountability in Data Privacy
Privacy legislation around the world is different in its technicalities but has a lot in common. The most famous recent laws are GDPR (EU but with extra-territorial effect) and CCPA (California, but practically affects the US and even services outside the US). In both CCPA and GDPR the accountability is covered to ensure that any business should be able to demonstrate (and prove to regulators) that they duly handle consumer requests – The Role of Accountability in Data Privacy As Seen in GDPR and CCPA
Technologies Focused on Providing GDPR Compliance
Apart from existing organizational and technological measures, we may also need novel technologies to support an advanced data protection program. We have leveraged our knowledge and expertise to develop the leading Privacy by Design database that can save both money and trouble for the overstretched DPO. A brief look into its functionality can be found in this article – Releasing SentinelDB, the Privacy By Design Database
If you are interested in exploring how LogSentinel’s advanced solutions can help you achieve indisputable GDPR compliance, book a free consultation today:
Denitsa Stefanova is a Senior IT Business Analyst with solid experience in Marketing and Data Analytics. She is involved in IT projects related to marketing and data analytics software improvements, as well as the development of effective methods for fraud and data breach prevention. Denitsa supports her IT-related experience by applying her skills into her everyday duties, including IT and quality auditing, detecting IT vulnerabilities, and GDPR-related gaps.
