1.
w: rencore.com | e: info@rencore.com | t: @rencore
Manage Customization Risk and
Save on Maintenance Costs!
Customization governance, transformation
and risk prevention for SharePoint & Office365
Myth-busting EU GDPR
In Office 365
January 25th, 2018

2.
rencore.com
Q&A
Please use the Q&A functionality in
Zoom instead of chat.
We will pick up some questions at the
end and answer the others in the
follow-up email.
FAQ:
Recording of this webinar?
Yes, the session is recorded and you will
get the recording later today.

3.
rencore.com
Our Guest:
Matthias Seidel
Head of Marketing at Rencore
Your Host:
Nicki Borell
Microsoft MVP
Consultant & Hypnotist
Office 365 & Azure

4.
Myth-busting GDPR
in Office 365 &
Azure

5.
TARGET AUDIENCE
PROCESS OWNER
DATA PROTECTION OFFICERDECISION MAKER
ADMIN / ARCHITECTS

6.
TOPICS
Legal aspects
Requirements in
the context of
Office 365 & Azure
Data protection
impact assessment
how to get started
Mythbusting…

7.
Chapter 1: General
Provisions
Chapter 2: Principles
Chapter 3: Rights of
the Data Subject
Chapter 4: Controller
and Processor
Chapter 5: Transfer of
personal data to third
countries of
international
organizations
Chapter 6:
Independent
Supervisory
Authorities
Chapter 7: Co-
operation and
Consistency
Chapter 8: Remedies,
Liability, and
Sanctions
Chapter 9: Provisions
relating to specific
data processing
situations
Chapter 10: Delegated
Acts and
Implementing Acts
Chapter 11: Final
provisions
https://www.eugdpr.org/article-summaries.html

8.
Chapter 1: General
Provisions
Chapter 2: Principles
Chapter 3: Rights of
the Data Subject
Chapter 4: Controller
and Processor
Chapter 5: Transfer of
personal data to third
countries of
international
organizations
Chapter 6:
Independent
Supervisory
Authorities
Chapter 7: Co-
operation and
Consistency
Chapter 8: Remedies,
Liability, and
Sanctions
Chapter 9: Provisions
relating to specific
data processing
situations
Chapter 10: Delegated
Acts and
Implementing Acts
Chapter 11: Final
provisions
https://www.eugdpr.org/article-summaries.html

9.
Source:
http://www.sharepointtalk.net/2017/11/mic
rosoft-compliance-manager-
framework.html

10.
Chapter 1: General
Provisions
Chapter 2: Principles
Chapter 3: Rights of the
Data Subject
Chapter 4: Controller
and Processor
Chapter 5: Transfer of
personal data to third
countries of
international
organizations
Chapter 6: Independent
Supervisory Authorities
Chapter 7: Co-
operation and
Consistency
Chapter 8: Remedies,
Liability, and Sanctions
Chapter 9: Provisions
relating to specific data
processing situations
Chapter 10: Delegated
Acts and Implementing
Acts
Chapter 11: Final
provisions

11.
Chapter 1: General
Provisions
Chapter 2: Principles
Chapter 3: Rights of
the Data Subject
Chapter 4: Controller
and Processor
Chapter 5: Transfer of
personal data to third
countries of
international
organizations

12.
▪
▪ personal data
▪
▪
▪

13.
▪
▪
▪
▪
▪
▪
▪
▪
▪
▪
▪

14.
▪
▪
▪

15.
Microsoft Azure Information
Protection Scanner

16.
Source: https://alberthoitingh.com/2017/10/19/azure-information-protection-scanner/

17.
Source: https://alberthoitingh.com/2017/10/19/azure-information-protection-scanner/

18.
Configure classification &
create labels
https://docs.microsoft.com/en-us/information-protection/deploy-use/deploy-aip-scanner

19.
▪
▪
▪

20.
▪
▪
▪
Trust Center Compliance Reports Trust Center – Microsoft Azure
▪
▪
▪ Office 365 Service Descriptions
▪ Microsoft Azure Microsoft Azure Legal Information
▪ Licensing Terms and Documentation
Licensing Terms and
Documentation

21.
▪
▪ Bestreiten der Richtigkeit
▪ Einschränkungsverlangen
▪ Geltendmachung, Ausübung oder Verteidigung von
Rechtsansprüchen
▪ Widerspruch
▪
▪
▪ Labels in Azure Information Protection
▪ Retention policies in Office 365
▪
▪ Exporting content to the Office 365 Security & Compliance Center
▪ Options for downloading data from Office 365

22.
▪
▪
▪ Zweckfortfall
▪ Widerruf der Einwilligung
▪ Widerspruch
▪ Unrechtmäßige Verarbeitung
▪ Erfüllung einer rechtlichen Verpflichtung
▪ Daten von Minderjährigen
Licensing Terms and Documentation

23.
Those hoping that the right to be forgotten will allow them to clear their credit history or uncomely moments on
Facebook etc. are going to be disappointed

24.
Those hoping that the right to be forgotten will allow them to clear their credit history or uncomely moments on
Facebook etc. are going to be disappointed
Source:
http://ec.europa.eu/justice/data-
protection/files/factsheets/factsheet_rtbf_mythbusting_en.pdf
http://ec.europa.eu/justice/data-
protection/files/factsheets/factsheet_mythbusting_2012_en.pdf

25.
▪
▪ DLP Policies
▪ Microsoft Azure Information Protection
▪
▪
▪ Exporting content to the Office 365 Security & Compliance Center
▪ Options for downloading data from Office 365

26.
▪
▪ Reports in Office 365
▪ Free Office
365 Reporting Tool
▪

27.
http://demo.admindroid.com/
&
Office 365 Reports

28.
▪
Sicherheit der Verarbeitung
▪
Meldung eines Datenschutzvorfalls an die Aufsichtsbehörde
▪
Benachrichtigung der betroffenen Person(en) eines Datenschutzvorfalls
▪
▪
▪
▪

29.
▪
▪
▪
▪
▪
▪
▪ Enterprise Mobility & Security
▪ Microsoft 365 Business Microsoft 365 Enterprise
▪
▪ Advanced Threat Analytics
▪ Customer Lockbox

30.
▪
▪ Richtigkeit und Qualität
▪ Unversehrtheit und Aktualität der Daten
▪
▪ Kein Dritter darf unbefugt Kenntnis oder Zugriff auf
personenbezogene Daten erhalten
▪ Informationssicherheit
▪ Aufbewahrungs- und Weitergabebeschränkungen
▪
▪ Welche Daten wurden wofür erhoben und verarbeitet?
▪ Welche Techniken und Prozesse werden hierfür genutzt?
▪ Wer ist jeweils verantwortlich?
Trust Center Compliance Reports Trust Center –
Microsoft Azure Customer Lockbox

31.
1.
2.
3.
4.

32.
Compliance Manger

33.
Source: http://www.sharepointtalk.net/2017/11/microsoft-compliance-manager-framework.html

34.
▪ Compliance Manager in Office 365
▪ GDPR Assessment Tools
▪ Microsoft GDPR Assessment
▪ Microsoft GDPR Detailed Assessment
▪ Office 365 Secure Score
▪ Microsoft Partner Resources Overview
▪
https://www.lda.bayern.de/media/dsgvo_fragebogen.pdf

35.
Governance and Risk Prevention for SharePoint
AnalysisCloud brings governance and risk prevention to
SharePoint Online customizations.
AnalysisCloud:
• Discovers all customizations live in your SharePoint Online
• Analyzes customizations for potential and actual threats and
violations
• Continuously tracks and monitors existing and new
customizations
Learn more about AnalysisCloud:
https://try.rencore.cloud
rencore.com

36.
rencore.com
Questions & Answers
Feel free to post your questions in the Q&A section

37.
What does it mean to migrate
from SharePoint to Office 365?
February 22nd, 2018, 16:00 CEST
Speakers:
Benjamin Niaulin
Microsoft MVP at ShareGate
Erwin van Hunen
Microsoft MVP at Rencore
Coming up next:

38.
rencore.com
Thank you for attending!
The webinar recording will be sent to you later today.