General Data Protection Regulation: Where are we now?

DataManagementReview.comSeptember 6, 2017
FROM
Welcome to A-Team Group’s webinar
General Data Protection Regulation:
Where are we now?

FROM
Join the
Data Management Review Online Community
Data Management Review is your single destination for knowledge and resources covering data management
approaches, trends and challenges as well as all the regulations impacting financial data management for the
enterprise.
Join our 15,000 other members - it’s entirely free to join!
Sign up at http://bit.ly/signupforDMR
Membership entitles you to free access to expert unbiased commentary.
We deliver:
 Regular weekly updates on the latest news and views
 Blogs and commentary
 White papers
 Surveys and research
 Data management handbooks
 Events
 Webinars
 Awards

FROM
Moderator:
Sarah Underwood, Editor, A-Team Group

FROM
Panel Member: Sue Geuens, President, DAMA;
Independent Consultant in Financial Services
Areas of Expertise:
• Responsible for building the algorithms for quality
matching for the first South African data quality tool
during the early 2000s
• Have used almost all the data quality tools in the
market extensively over the past 15 years
• Data governance head/lead at a number of clients
• I am a dataholic … so anything data is my passion
https://uk.linkedin.com/in/suegeuens

FROM
Panel Member: Chiara Rustici, Independent GDPR
Analyst
Areas of Expertise:
• Author of ‘Applying the GDPR. Privacy rules for the data
economy’ (forthcoming)
• Formerly jurisprudence and international law tutor,
postgraduate and CNR (Italy) research fellow
• Advised hedge funds, top tier banks and multinational
insurers on GDPR key priorities, implementation strategy
and impact on business model of key services
• Regular speaker on GDPR at British Computing Society
(BCS), IQPC and both learned societies and trade events
• Lead of the EDRM workgroup on GDPR
https://uk.linkedin.com/in/chiararustici
Email: c.rustici@gmail.com

FROM
Panel Member: Abigail Dubiniecki, GDPR Specialist,
My Inhouse Lawyer
Areas of Expertise:
• Advises mid-tier firms on GDPR implementation
and compliance
• Delivers executive training on GDPR through Henley
Business School's GDPR Transition Programme
• Lead researcher/writer of an e-learning module on
technical and organisational aspects of GDPR for
Henley Business School
• Written and spoken about GDPR related topics
such as data protection by design and the right
to be forgottenhttps://uk.linkedin.com/in/abigaild

FROM
Panel Member: Tudor Borlea, Sales Engineer
and GDPR Specialist, Collibra
Areas of Expertise:
• Collibra product specialist
• Certified information privacy professional
with the IAPP (CIPP/E)
• A technical and management consulting
background
• A focus on GDPR and its data governance
ramifications for the past nine months
https://uk.linkedin.com/in/tudorborlea

FROM
Scope of General Data Protection Regulation and key requirements
May 25, 2018 compliance deadline, workarounds and fines
Key challenges of GDPR before and after go-live of the regulation
Best practice approaches to data management challenges
The importance of data governance to achieving compliance
Technology solutions available to support GDPR implementation
 Business and operational benefits of a successful GDPR programme
Expert advice on GDPR for data management practitioners
Talking Points

FROM
The scope of GDPR and its key requirements
• Ensure individuals’ rights
• Right to be informed
• Right of access
• Right of rectification
• Right to be forgotten
• Right to portability
• Right to object to processing
• Accountability
• Documentation
• Data protection by design
• Data Protection Officer
• Breach notification

FROM
9%
17%
29%
We will have fully compliant
infrastructure
We will be compliant but with
many workarounds
We will be partially compliant and
able to show intent
Will financial services firms achieve compliance
by the May 25, 2018 deadline?
Source: A-Team Group/ASG, How to Tackle the Challenges of GDPR, August 2017
Do you expect to have infrastructure in place to achieve compliance with
GDPR when it takes effect in May 2018?
Percentage of respondents

FROM
The key challenges of GDPR
Rank these tasks in magnitude of workload
40%
60%
80%
80%
87%
Winning management buy-in and budget
Understanding the requirements of GDPR
Identifying required data
Working across multiple jurisdictions
Designing workflow to meet GDPR requirements

FROM
How are firms addressing the data and data
management challenges of GDPR?

FROM
Technology solutions that play well into compliance

FROM

FROM
The importance of data governance to achieving
ongoing compliance
• Identifying personal data
• Discovering processes that
use personal data
• Ensuring data privacy
• Making data changes
• Responding to individuals’
requests

FROM
Firms operating outside the EU but within the scope
of GDPR requirements

FROM
A step-by-step approach to implementing GDPR
Tag data fields
containing personal
data
Implement a solution
– preferably a central
data repository
Build in privacy by
design
Implement data
governance
Monitor and update
data
Ensure easy access
to data
Review data, identify
personal data
Discover apps and
processes using
personal data

FROM
Business and operational benefits of a successful
implementation of GDPR
What benefits does your organisation expect to gain from a successful
implementation of GDPR?
Percentage of respondents
80%
99%
20%
80%
87%
30%
7%
13%
20%
13%
20%
7%
67%
80%
Regulatory compliance
Reduced liability
Improved data understanding
Better customer confidence
Reduced reputational risk
Reduced cost
Business benefit
Operational benefit
No benefit

FROM
Advice for data management practitioners
preparing for GDPR

FROM
Thank you to our sponsor
Contact:
Tudor Borlea
tudor.borlea@collibra.com

FROM
Upcoming A-Team Group Events
Visit DataManagementReview.com/events
October 5th – RegTech Summit for Capital Markets, London
November 16th – RegTech Summit for Capital Markets, New York City

FROM
Upcoming A-Team Group Webinars
Visit webinar section of
Datamanagementreview.com
September 12th – Harmonising data for regulatory reporting and record
keeping
September 13th – MiFID II: Is the market truly ready? Will compliance be
achieved?
September 14th – Meeting the imperative for data quality

FROM
A-Team Group Handbook Series
Visit the handbooks section of
Datamanagementreview.com

General Data Protection Regulation: Where are we now?

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to General Data Protection Regulation: Where are we now?

Similar to General Data Protection Regulation: Where are we now? (20)

More from Leigh Hill

More from Leigh Hill (20)

Recently uploaded

Recently uploaded (20)

General Data Protection Regulation: Where are we now?