Who owns GDPR compliance in your organization?  Do they have a mandate?

Although some organizations have a mature cross-functional data governance capability, most organizations will need to start with defining a roadmap that details the people, processes, technologies and outcomes required for successfully achieving GDPR compliance.  

Finding, classifying and assessing sensitive personal data is an important second step. After this, the real  work begins.

It's a multidisciplinary process: for this reason, most organizations radically underestimate the challenge to transform business and IT operations for GDPR compliance.  

• Data Discovery and Classification

  • Integration for Data Discovery

  • Business rules engine for Data Classification 

• Privacy by Design

  • Integration with identity management 

  • Integration with service management and monitoring

  • Pseudonymization and anonymization as a service

• Automation

  • Consent Management

  • Dynamically filtering data sent to internal and 3rd party data processors

  • Right to be Forgotten (RTBF) 

  • Data portability

  • Consent changes

  • Opt-out of Data Profiling

  • Subject Access Requests

  • GDPR Process Receipts (audit)

Next:

GDPR Solution Overview