What approaches are being taken to tackle the policy challenges within the big data landscape, and how are these solutions coping in reality? This webinar will address these issues through the perspective of two projects: e-SIDES and SMOOTH. Daniel Bachlechner, of e-SIDES, will discuss the organizational and technical challenges that privacy-preserving big data technologies present, and how an increased level of dialogue between stakeholders can pave the way for appropriate and fair solutions. Rosa M. Araujo Rivero will delve into the main challenges experienced by SMEs and startups in dealing with GDPR compliance. Rosa’s work with the SMOOTH project will demonstrate how the proposed solutions are experienced in practice.

1. New challenges for data regulation beyond the
GDPR: how to assess risks and develop tools in an
era of AI?
Making GDPR work for SMEs

2. 2
Current GDPR issues for
SMEs
• Eager to comply (SMEs can’t risk a fine)
• Significant resources spent on consultants and IT, often being given misleading advice
• Confused by the sheer complexity of GDPR requirements
• Aren’t able to test compliance

3. 3
GDPR.EU survey (2019)
says…
• 2/3 of individuals claimed their organised uses an end-to-end encrypted email provider, when in fact
only 9% named a service with this kind of in-built encryption.
• Almost 50% of respondents don’t always determine a Lawful Basis for Processing User Data before
doing so.
Full Survey: https://gdpr.eu/wp-content/uploads/2019/05/2019-GDPR.EU-Small-Business-Survey.pdf

4. 4
SMEs find GDPR
implementation
challenging because it’s
difficult to…
• Assess whether one is a data controller or processor
• Determine what constitutes “large-scale processing”
• Know whether to keep a record of processing activities
• Appoint a Data Protection Officer
• Define the principle of accountability

5. 5
Other barriers for SMEs
and GDPR compliance
• GDPR guidance and support varies from one EU MS to another
• Different interpretations of the rules from one DPA to another

6. 6
Solutions for SMEs
• Review legislation with definitions and thresholds?
• Single set of uniformly enforced data protection rules across Europe: eliminate divergence
between Member States’ laws
• Consistent communication and tailored information: better self-assessment tools provided
by the European Commission and the EU Member States

7. 7
What should these tools
include?
Regulatory tools DPA Self-evaluation
toolkits
EU Assessment and
validation tools

8. 8
SMOOTH Project
(Horizon 2020)
• SMOOTH assists micro enterprises in adopting and complying with the General Data
Protection Regulation (GDPR) by designing and implementing easy-to-use and affordable
tools.
• Long-term awareness on the importance of GDPR compliance through:
• SMOOK – the Smooth Handbook
• SMOOTH Platform – cloud-based tool to become the reference solution in Europe for
GDPR compliance validation for micro enterprises.
• www.smoothplatform.eu

9. THANK YOU
Karen Clements
Karen.Clements@esba-europe.org
Tel. +32 496 77 53 34