GDPR - General Data Protection Regulation

Is Your Business Ready?

DMPR Consulting provides a range of services supporting businesses to comply with General Data Protection Regulation (GDPR) which will come into effect on May 25th 2018.

The General Data Protection Regulation, or GDPR, is fundamentally about protecting and enabling the privacy rights of individuals. The GDPR establishes strict global privacy requirements governing how you manage and protect personal data while respecting individual choice—no matter where data is sent, processed, or stored.

The core service we provide is our GAP analysis workshop that allows us to work with our clients to identify some of the key challenges:

Where is your Personal Identifiable Information data stored
Who has access to all your Personal Identifiable Information
Which applications access and store Personal Identifiable Information
Do you share the Personal Identifiable Information with 3rd parties
What data retention should you have on the Personal Identifiable Information
Are you able to respond to Data Subject requests
Do you have an appointed Data Protection Officer (DPO)

In our workshops we follow the following four key steps:

If not then DMPR can help

PowerBI_2

GDPR Individual Maturity Stages

PowerBI_2

1/2

As part of the workshop we will carry out a Gap Analysis questionnaire which will help identify the maturity of your business in relation to GDPR compliance.

The questionnaire will assist in producing a number reports for the business along with a list of recommendations that can be used to develop a road for resolving any gaps in your GDPR compliance requirements.

Discover

This will help you to understand what data is classified as personal, and to identify the systems where that data is collected. We will also gather an understanding as to why it was collected in the first place, how it is processed, shared and how long it is to be retained.

Report

Once Discovery is complete, it is important to develop and implement a data governance plan. A data governance plan can help you define policies, roles, and responsibilities for the access, management, and use of personal data, and can help you ensure your data handling practices comply with the GDPR.

Protect

Data security is a complex area and there are many types of risks to identify and consider: physical intrusion and rogue employees to accidental loss or hackers. Building risk management plans and taking risk mitigation steps such as password protection, (remove comma) audit logs and encryption (remove comma) can help you be compliant.

Manage

Once Discovery is complete, it is important to review how your data is being managed by developing and implementing a data governance plan. This will help you to define your policies, roles and responsibilities for the access, management and use of personal data. The result of this will help you to ensure your data handling practices comply with the GDPR

Product