The document discusses the General Data Protection Regulation (GDPR) which takes effect on May 25, 2018. It defines personal data as any information relating to an identified or identifiable natural person, including various types of data like name, location, identification number, online ID, genetic, gender, physical, ethnic, cultural, social identity, memberships, and biometric. Data can exist in different states including at rest, at work, and in motion. The GDPR requires that everyone who handles personal data, including data controllers and processors, must be able to explain what data they have, where it is stored, when it is shared, who has access to it, why it is needed, and how it is secured. Responsive

1. General Data
Protection Regulation
G.D.P.R.
Joe Orlando 1

2. May 25, 2018
Joe Orlando 2

3. Significant Data Protection EU
Personal data is defined as “any
information relating to an identified
or identifiable natural person ‘data
subject…:”
• Name
• Location
• Identification Number
• OnLine ID
• Genetic
• Gender
• Physical
• Ethnic
• Cultural
• Social Identity
• Memberships
• Biometric
Joe Orlando 3

4. Data Has Different States
Joe Orlando 4
At REST
At WORK
In MOTION

5. NOT “Just another IT Project!”
EVERYONE “owns” the
Solution.
Data Controller (who NEEDS the
data)
Why Do You NEED the Data?
Data Processor (who uses the data
to complete tasks)
What Do You DO with the Data?
How is this Data Stored; Managed;
Secured; Shared; Refreshed; and
Joe Orlando 5
ICT only FACILITATES
the Outcome:
Store
Move
Protect
ICT Cannot Do This
Alone.

6. Joe Orlando 6
What?
Where?
When?
Who?
Why?
How?
Permission?
Secure?
How Long?
Significant Data Protection EU

7. Joe Orlando 7
What?
Where?
When?
Who?
Why?
How?
Permission?
Secure?
How Long?
Significant Data Protection EU

8. Joe Orlando 8
Significant Data Protection EU

9. Joe Orlando 9
Responsive Resources Required

10. Joe Orlando 10
Race Against the Clock!
Law takes Effect May 25, 2018
NOT a ONE TIME THING - ONGOING
• Data Breach MUST Be Reported in 72 Hours
of Aware of Breach
• Individuals Can ask for Data and Must Be
Responsive in 30 Days
• Individuals MUST provide CLEAR Permission
to Hold Information
• 3rd Party Processors Does NOT Eliminate
Responsibility
• Data in Cloud – Cookies – Devices
• All States of Data

11. Joe Orlando 11
Race Against the Clock!
Law takes Effect May 25, 2018
NOT a ONE TIME THING - ONGOING
Failure to Comply with the
Regulation could mean
2% to 5% of GLOBAL
GROSS REVENUES
as a fine