The document provides an overview of the General Data Protection Regulation (GDPR) which mandates new European data protection laws enforceable as of May 25, 2018. It discusses DHR International's compliance efforts which include requiring new hires to sign confidentiality policies, providing data privacy training, using a customer relationship management database that meets GDPR requirements, and updating various policies to align with best practices. DHR also operates under guidance of a data protection officer and can address individual data requests.

1. GDPR Overview
DHR INTERNATIONAL
MAY 2018

2. Copyright © 2018 DHR International, Inc. All Rights Reserved. 2
GDPR Overview
Main principles of the regulations include:
■ Fair, lawful, and transparent processing of personal data
■ Specified, explicit, and legitimate purposes for the collection and processing of personal data
■ Personal data that is adequate, relevant, and limited to what is necessary in relation to the
purposes of the processing
■ Personal data is accurate and is kept up to date
■ Personal data is kept only as long as necessary
■ Personal data is processed in an appropriate manner to maintain security of the data
General Data Protection Regulation (GDPR): a set of European data
protection mandates that are enforceable as of May 25, 2018

3. Copyright © 2018 DHR International, Inc. All Rights Reserved. 3
GDPR at DHR
■ DHR requires new hires to sign acceptable use and confidentiality
policies as a part of onboarding. The company provides data privacy
training sessions to new hires, and recurring training to all employees
thereafter.
■ DHR utilizes a Dillistone FileFinder CRM database to store candidate and
client records. FileFinder meets or exceeds information security
requirements for GDPR. The application also includes native support for
GDPR compliance functions, including:
– Logging of consent/legitimate interest communications
– Deletion of protected data if requested
– Other data retention and audit requirements
DHR International remains committed to the secure, confidential
processing of personal data
People
Process
Technology

4. Copyright © 2018 DHR International, Inc. All Rights Reserved. 4
GDPR at DHR
■ DHR is updating its privacy policy, information security policy, disaster
recovery and business continuity policies—among others—to align with
data privacy best practices
■ DHR operates under the guidance of a data protection officer
■ DHR is able to sign standard contractual clauses which address the
transfer of protected data between entities
■ Individual subject access requests directed to DHR may be addressed to
SAR@dhrinternational.com
■ DHR’s updated privacy policy will be available at
http://www.dhrinternational.com/privacy-policy on or before May 25
DHR International remains committed to the secure, confidential
processing of personal data
People
Process
Technology