After more than four years of discussion, the new EU data protection framework has finally been adopted. Ever since the European Commission first proposed its text back in 2012, this legislation has attracted a huge amount of attention. But what is the General Data Protection Regulation (GDPR), why was it created, what are some of the key aspects and how does it affect your company?

1. Microsoft’s Commitment to the General
Data Protection Regulation (GDPR)
Peter van Leeuwen
EMEA Enterprise Mobility + Security GBB
This presentation is intended to provide an overview of GDPR and is not a definitive statement of the law.

2. Providing clarity and consistency for the protection
of personal data
Enhanced personal privacy rights
Increased duty for protecting data
Mandatory breach reporting
Significant penalties for non-compliance
The General Data Protection
Regulation (GDPR) imposes new
rules on organizations that offer goods
and services to people in the European
Union (EU), or that collect and analyze
data tied to EU residents, no matter
where they are located.

3. Personal
privacy
What are the key changes with the GDPR?
Individuals have the right to:
• Access their personal
data
• Correct errors in their
personal data
• Erase their personal data
• Object to processing of
their personal data
• Export personal data

4. Personal
privacy
What are the key changes with the GDPR?
Controls and
notifications
• Strict security
requirements
• Breach notification
obligation
• Appropriate consents
for data processing
• Confidentiality
• Recordkeeping
Individuals have the right to:
• Access their personal
data
• Correct errors in their
personal data
• Erase their personal data
• Object to processing of
their personal data
• Export personal data

5. Personal
privacy
What are the key changes with the GDPR?
Controls and
notifications
Transparent
policies
• Strict security
requirements
• Breach notification
obligation
• Appropriate consents
for data processing
• Confidentiality
• Recordkeeping
Individuals have the right to:
• Access their personal
data
• Correct errors in their
personal data
• Erase their personal data
• Object to processing of
their personal data
• Export personal data
Transparent and easily
accessible policies
regarding:
• Notice of data
collection
• Notice of processing
• Processing details
• Data retention/deletion

6. Personal
privacy
What are the key changes with the GDPR?
Controls and
notifications
Transparent
policies
IT and training
Need to invest in:
• Privacy personnel and
employee training
• Data policies
• Data Protection Officer
(if 250+ employees)
• Processor/Vendor
contract
• Strict security
requirements
• Breach notification
obligation
• Appropriate consents
for data processing
• Confidentiality
• Recordkeeping
Individuals have the right to:
• Access their personal
data
• Correct errors in their
personal data
• Erase their personal data
• Object to processing of
their personal data
• Export personal data
Transparent and easily
accessible policies
regarding:
• Notice of data
collection
• Notice of processing
• Processing details
• Data retention/deletion

7. Microsoft’s commitment to its customers
WITH OUR LONG-STANDING COMMITMENT TO
SECURITY AND PRIVACY, YOU CAN TRUST MICROSOFT
TO PROVIDE THE PRODUCTS AND SERVICES YOU’LL
NEED AS YOU WORK TOWARD GDPR COMPLIANCE.
OUR GOAL IS TO STREAMLINE YOUR GDPR
COMPLIANCE THROUGH SMART TECHNOLOGY,
INNOVATION, AND COLLABORATION.

8. Microsoft’s goal is to streamline your
GDPR compliance through smart
technology, innovation, and
collaboration. Together we’ll help you
build a more secure environment,
simplify your compliance with the GDPR,
and give you the tools and resources
you need to be successful.
Partnering with you to
prepare for GDPR
Preparing
for GDPR

9. What can you do today?
Identify what personal
data you have and
where it resides.
Manage how personal
data is used and
accessed
Establish security controls
to prevent, detect, and
respond to vulnerabilities
& data breaches
Action data requests
and keep required
documentation
Analyze data and
systems, stay compliant
and reduce risk
1 2 3 4 5
Discover Control Protect Report Review

11. • Microsoft.com/GDPR