Balancing the use of personal data required by Markets in Financial Instruments Directive II (MiFID) as part of its transparency regime with the personal data protection rules set out in General Data Protection Regulation (GDPR) is a tough task – tell us everything, but keep it secret – that many financial institutions are struggling with. How can they store personal data for five or seven years as required by MiFID II when GDPR states that data should be kept for no longer than necessary? And how can they respond to data subjects’ requests to exercise the right to be forgotten under GDPR when the transparency requirements of MiFID II allow no such thing? The webinar will consider the conflicts around personal data that result from MiFID II and GDPR requirements, and detail how they can be reconciled to meet the needs of both regulations while avoiding the exorbitant fines of non-compliance with GDPR. Register for the webinar to find out more about: -Personal data requirements of MiFID II and GDPR -Conflicts arising from these requirements -Best practice approaches to reconciliation -Technology solutions to support compliance -Practical examples of conflict and resolution

1. DataManagementReview.comSeptember 25, 2018
FROM
Welcome to A-Team Group’s webinar
Balancing regulatory transparency
with data protection

2. DataManagementReview.comSeptember 25, 2018
FROM
A recording of this webinar can be found
at:
http://resource.datamanagementreview.c
om/webinar-recording-balancing-
regulatory-transparency-sept2018

3. DataManagementReview.comSeptember 25, 2018
FROM
Join the
Data Management Review Online Community
Data Management Review is your single destination for knowledge and resources covering data management
approaches, trends and challenges as well as all the regulations impacting financial data management for the
enterprise.
Join our 15,000 other members - it’s entirely free to join!
Sign up at http://bit.ly/signupforDMR
Membership entitles you to free access to expert unbiased commentary.
We deliver:
 Regular weekly updates on the latest news and views
 Blogs and commentary
 White papers
 Surveys and research
 Data management handbooks
 Events
 Webinars
 Awards

4. DataManagementReview.comSeptember 25, 2018
FROM
Moderator:
Sarah Underwood, Editor, A-Team Group

5. DataManagementReview.comSeptember 25, 2018
FROM
Panel Member: Sue Baldwin, Vendor Management
Expert and Independent Consultant
Areas of Expertise:
• Independent data management consultant
specialising in driving data strategy and data privacy
across organisations
• 30 years of experience in financial services
• Currently the EU GDPR programme manager for
Lloyds of London

6. DataManagementReview.comSeptember 25, 2018
FROM
Panel Member: Dessa Glasser, Principal at Financial
Risk Group, and Independent Board Member of
Oppenheimer & Co
Areas of Expertise:
• A proven track record of designing and executing
global innovative solutions for clients in the areas of
data, analytics and risk
• The first Chief Data Officer for JPMorgan Chase
Asset Management
• The first Deputy Director of the Office of Financial
Research (US Treasury), responsible for data,
standards, analytics and technology
• First Chief Risk Officer for Bunge

7. DataManagementReview.comSeptember 25, 2018
FROM
Panel Member: Ken Krupa, Chief Technology Officer,
Marklogic
Areas of Expertise:
• Software design and development
• Infrastructure design
• Application architecture
• Enterprise architecture
• Business strategy
• Technology strategy
• FinTech
• Technical evangelism

8. DataManagementReview.comSeptember 25, 2018
FROM
Personal data requirements of MiFID II and their importance
Personal data protection rights of GDPR and the regulatory aim
Conflict between personal data requirements of MiFID II and GDPR
How firms are coping the conflict and what they should prioritise
A best practice strategic approach to reconciling conflicts
Data management implications of reconciliation across regulations
Technology solutions to support compliance with MiFID II and GDPR
Advice for practitioners working across both the regulations
Talking Points

9. DataManagementReview.comSeptember 25, 2018
FROM
Personal data requirements of MiFID II
“MiFID II includes provisions
governing the recording of
trading-related electronic and
voice communications. Firms
must store and archive records
so they are easily accessible to
regulators and must store
records for five years or up to
seven years if requested by a
competent authority.”
Source: A-Team Group MiFID II Handbook

10. DataManagementReview.comSeptember 25, 2018
FROM
Personal data protection rights enshrined in GDPR
“GDPR gives individuals extensive
rights to find out what personal
information firms hold about them
and how it is used. They can also
enforce rights to rectify and erase
data – essentially the right to be
forgotten. All good from an
individual’s perspective, but for
firms storing and processing
personal data, the compliance
challenge is considerable.”
Source: A-Team Group GDPR Handbook

11. DataManagementReview.comSeptember 25, 2018
FROM
Conflict between personal data requirements of
MiFID II and GDPR and how it could affect business

12. DataManagementReview.comSeptember 25, 2018
FROM
How firms are coping with the conflict and
prioritising requirements
• GDPR takes priority
because fines for non-
compliance are enormous
• MiFID II takes priority
because regulatory scrutiny
of comms data is intense
• Neither of these priorities
works successfully
• A hybrid approach is
necessary to resolve the
conflict between MiFID II
and GDPR

13. DataManagementReview.comSeptember 25, 2018
FROM
Are firms taking a tactical or strategic approach
to stay within the boundaries of MiFID II and GDPR?

14. DataManagementReview.comSeptember 25, 2018
FROM
Cases of non-compliance and penalties
Potential penalties of
non-compliance
• Financial fines
• Reputational damage
• Loss of customers
• Increased regulatory scrutiny
• Cease and desist orders

15. DataManagementReview.comSeptember 25, 2018
FROM
Best practice approaches to developing a
strategic response to the conflict

16. DataManagementReview.comSeptember 25, 2018
FROM
The data management implications of
reconciliating the conflict
• Identifying conflicting data
• Managing data for
compliance with both
MiFID II and GDPR
• Demonstrating how this has
been done
• Sustaining compliance

17. DataManagementReview.comSeptember 25, 2018
FROM
Technology solutions to solve the problems of
different personal data requirements across
MiFID II and GDPR

18. DataManagementReview.comSeptember 25, 2018
FROM

19. DataManagementReview.comSeptember 25, 2018
FROM
Examples of conflict and resolution

20. DataManagementReview.comSeptember 25, 2018
FROM
Could future rules or regulations exacerbate the
problem with more conflicting requirements?

21. DataManagementReview.comSeptember 25, 2018
FROM
Advice for practitioners working to resolve the
conflict between the personal data requirements
of MiFID II and GDPR

22. DataManagementReview.comSeptember 25, 2018
FROM
Thank you to our sponsor
Ken Krupa,
Enterprise CTO
+1 212-613-6641 (o)
ken.krupa@marklogic.com
www.marklogic.com
https://www.linkedin.com/in/kekrupa
Twitter @kenkrupa

23. DataManagementReview.comSeptember 25, 2018
FROM
Upcoming A-Team Group Events
Visit DataManagementReview.com/events
RegTech Summit for Capital Markets - London, 4th October 2018
RegTech Summit for Capital Markets - New York City, 15th November 2018
Data Management Summit - London, 21st March 2019

24. DataManagementReview.comSeptember 25, 2018
FROM
Upcoming A-Team Group Webinars
Visit webinar section of
DataManagementReview.com
Client lifecycle management: faster Onboarding, KYC, AML and GDPR
processing, October 2nd
Innovation: How to leverage machine learning, artificial intelligence and
blockchain in data management, October 11th
Data Governance frameworks, October 18th
Balancing compliance and value in data management initiatives, October 25th

25. DataManagementReview.comSeptember 25, 2018
FROM
Visit the handbooks section of
Datamanagementreview.com
A-Team Group Handbook Series