We take a look at the risks of non-compliance when it comes to GDPR and what can be done to assist your own compliance through the use of GDPR365 software.

1. How we help
GDPR non-compliance risks

2. GDPR in the news
28/9/17
© 2017 POPI365
2

3. 28/9/17
© 2017 POPI365
3
Bridging the chasm
REGULATION
IMPLEMENTATION
Bridging the chasm
REGULATION
IMPLEMENTATION

4. 28/9/17
© 2017 POPI365
4
Managing the tech stack tension
Business sponsored tech
Impactive on revenue, cost or
Customer satisfaction
Underdeveloped tech
Information Management
Governance Environment

5. GDPR and the tech challenges
28/9/17
© 2017 POPI365
5
• GDPR is complex and open to interpretation: technology likes rules and
clarity
• Manage personal data when enterprise knowledge of where it sits is
incomplete
• Shadow IT fragments where personal data is processed and has taken
control away from the IT department

6. Role of tech in GDPR compliance
28/9/17
© 2017 POPI365
6

7. Role of tech in GDPR compliance
28/9/17
© 2017 POPI365
7
• Data discovery
• Data mapping
• DPIAs
Assessments Governance Security Processes Analysis
• Case management
• Controls management
• Compliance
demonstration
• Training demonstration
• Encryption/pseudonymisation
• Network security
• Application security
• IT infrastructure security
• Data maintenance
• Breach response
• Consent management
• Access management
• Activity monitoring
• Archive management

8. GDPR risks to small businesses
28/9/17
© 2017 POPI365
8
• No oversight of compliance activity and no accountability
• Insufficient data security
• Insufficient notice and consent practices
• Unresponsiveness to data subject requests
• No records of compliance efforts

9. The high priority issues
• How will you support GDPR compliance
• Do you need to appoint a data protection officer?
• Demonstrate accountability in all processing activities
• Check your cross-border data flows
• Prepare for data subjects exercising their rights
28/9/17
© 2017 POPI365
9

10. GDPR365 collaboration hub
28/9/17
© 2017 POPI365
10

11. Data transparency
28/9/17
© 2017 POPI365
11
Map personal data’s whereabouts, composition, usage, collection
source and how it’s being protected

12. Reporting efficiency
28/9/17
© 2017 POPI365
12
Deliver progress reports for every audience both internal and
external

13. Risk reduction
28/9/17
© 2017 POPI365
13
Identifying risk gaps and demonstrating compliance
Records of data sharing internally and outside EU
Records of data processing, processors, legal
justification and retention periods

14. Risk reduction
28/9/17
© 2017 POPI365
14
Managing data subject requests
Data breach incident management and communications

15. Risk reduction
28/9/17
© 2017 POPI365
15
Transparency and Governance
Generating and updating privacy notices and internal policies
Company wide commitment and collaboration.
Training staff and demonstrating their GDPR understanding
and compliance