The document discusses building a data governance strategy to comply with GDPR regulations. It emphasizes the need to identify where personal information data resides, who uses it, and how. An effective strategy requires having measurable goals, knowing who is responsible for personal data, and showing how data impacts the organization. The document promotes a solution called Information Value Management that provides pre-configured GDPR processes, rules, standards and templates to discover personal data, link it to protection standards, assign ownership, and embed compliance processes organization-wide. A case study describes how one company quickly achieved GDPR compliance across its business units using this solution.

1. I Want to Think Beyond GDPR.
How to Build a Strategy Customers & Auditors Love.
Confidential and Proprietary. Copyright© 2018. DATUM LLC

2. What is Data?
Confidential and Proprietary. Copyright© 2018. DATUM LLC2

3. Data is Everything
Confidential and Proprietary. Copyright© 2018. DATUM LLC3

4. Data is a
wonderful thing.
But it’s easy to forget what
data is and why it truly
matters.
Confidential and Proprietary. Copyright© 2018. DATUM LLC4

5. 5 Confidential and Proprietary. Copyright© 2018. DATUM LLC
We’re DATUM.
And we believe in data.

6. We help the world’s
leading organizations
identify, organize and use
data to solve problems
and create opportunities.
Confidential and Proprietary. Copyright© 2018. DATUM LLC6

7. GDPR is a Data Governance Challenge

8. The Need for
Trusted Data.
GDPR is about privacy, not pacifying regulators. It’s
about gaining and keeping customer trust. In order to
achieve that, you’re going to need to:
01| Have observable and measureable goals.
02| Show that you know where PI data is, who uses it
and why, and who is responsible for it.
03| Show how GDPR-related data impacts the
organization.
Confidential and Proprietary. Copyright© 2018. DATUM LLC8

9. Customers Will
Exercise Their Data
Rights
• Where does that request go?
• Can you easily find their personal data?
• Do you know where your privacy data is across
your ecosystem?
• Who does what to fulfill the request?
9 Confidential and Proprietary. Copyright© 2018. DATUM LLC

10. Auditors Will
Want Proof
• Can you clearly show due diligence?
• Have you documented policies and enforced
them?
• Can you prove that your partners are
compliant?
10 Confidential and Proprietary. Copyright© 2018. DATUM LLC

11. 11
Information Value Management®
01| Discover where GDPR personal information data lives, who uses it and how it is used.
02| Connect that information to data governance processes.
03| Enable collaboration with all stakeholders across the organization.
Confidential and Proprietary. Copyright© 2018. DATUM LLC

12. Don’t Start from
Scratch.
Information Value Management comes
preconfigured with:
• GDPR base processes
• Rules
• Standards
• Data
• Assets (templates and frameworks)
12 Confidential and Proprietary. Copyright© 2018. DATUM LLC

13. 13
What You Can Do
Discover PI relevant data.
Link protection standards/rules.
Assign ownership.
Embed processes.
Confidential and Proprietary. Copyright© 2018. DATUM LLC

14. The Benefits
01| Reduce Risk and Fines. Institute a systemic approach
that provides demonstrable due diligence and audit
readiness for regulators and minimizes the potential for
penalties for non-compliance.
02| Connect Data to Compliance. Link GDPR-related
processes, rules, standards, data and metrics to your
organization’s compliance goals and objectives.
03| Build Trust with Stakeholders. Demonstrate to
customers the personal information is handled
appropriately.
14 Confidential and Proprietary. Copyright© 2018. DATUM LLC

15. Case Study | BizX | Digital Media
Achieved GDPR
Compliant Processes
As a global digital media company, ensuring
the company was GDPR compliant was a
primary focus.
They needed to:
 Quickly address GDPR and scale that
process.
 Be able to value the cost of addressing
GDPR for companies they were acquiring
in Europe.

16. Case Study | BizX | Digital Media
Achieved GDPR
Compliant Processes
With Information Value Management, they:
 Quickly and efficiently stood up a GDPR
compliant process for their entire
business.
 Scaled GDPR to additional companies
they were acquiring.
 Instituted a common place for all
personnel involved in GDPR to
collaborate.

17. 17
Interested in Learning More?
Download: 3 Steps to GDPR Readiness
Confidential and Proprietary. Copyright© 2017. DATUM LLC