Euro-mageddon: Updating your Security & Privacy Programmes for GDPR
No ratings
Presented at lascon 2016 by
In April 2016, the European Union ratified Regulation (EU) 2016/679, better known as General Data Protection Regulation (GDPR). It enacts a series of new edicts and standardizes rules throughout Europe for core principles such as the right to be forgotten, right to your data, consent, privacy by design, and data portability. While many of the principles revolve around privacy, they also rely upon securing data as a foundation. GDPR also stiffens penalties for data miscreants - now ranging from warnings all the way up to fines set at 4% of global revenue. It is expected that many other nations, as well as many US states will align many of the principles of the GDPR in the future. We will enumerate, as entertainingly as possible, what you can do over the next 18 months to incorporate meeting GDPR into your security & privacy programme. If you don’t have such a programme, this may be even more valuable to helping you establish one.