Topics: - Introduction of Security & Compliance - Intelligent tools to discover and control your data - SharePoint Features for GDPR compliance - Exchange Features for GDPR compliance

1. Microsoft Official Course
Understanding the
Office 365 features for
GDPR compliance
*Webinar starts at 1 pm

2. Jackson Felden
jackson.felden@nhireland.ie
https://www.linkedin.com/in/jacksonfelden/

3. Webinar outline – 1 hour
• Introduction of Security & Compliance
• Intelligent tools to discover and control your data
• SharePoint Features for GDPR compliance
• Exchange Features for GDPR compliance

4. Upcoming Webinars
Understanding the Office365 features for GDPR compliance
Thursday September 20th
Introduction to PowerShell
Friday September 21st
Understanding Azure AD
Friday October 5th
Understanding the migration paths to Azure
Thursday October 18th

5. Skype Interface
Full ScreenChange to
presenter profile

6. Microsoft Official Course
Introduction of Security &
Compliance

7. Introduction of Security & Compliance
• What is the GDPR
• Journey to GDPR compliance
• Security & Compliance page
• GDPR toolbox
• Permissions to manage the configuration and data

8. What is the GDPR
• The GDPR is the European Union’s new data protection law. It
replaces the Data Protection Directive, which has been in
effect since 1995.
• While the GDPR preserves many of the principles established
in the Directive, it is a much more ambitious law. Among its
most notable changes, the GDPR gives individuals greater
control over their personal data and imposes many new
obligations on organizations that collect, handle, or analyze
personal data. The GDPR also gives national regulators new
powers to impose significant fines on organizations that
breach the law. Learn about Microsoft's commitment to GDPR
compliance

9. Journey to GDPR compliance

10. Where is your data located?
Microsoft Office 365 helps you comply with your data residency requirements and
regulations. On this page, we share where certain types of customer data are located
at rest for specific Office 365 services.
Ireland
Netherlands
Austria
Finland
This map shows the datacenter locations where we store core customer data at rest for new customers
who choose to provision their Office 365 tenant in the European Union Geo.

11. Where is your data located?

12. Where is your data located?
Office 365
Microsoft Teams
•Ireland
•Netherlands
Planner
•Ireland
•Netherlands
Project Online
•Ireland
•Netherlands
Sway
•United States
Yammer
•United States
OneNote Services
•Ireland
•Netherlands
School Data Sync
•Ireland
•Netherlands
Azure Active Directory
•Ireland
•Netherlands
•United States

13. Security & Compliance page
https://protection.office.com

14. GDPR toolbox

15. Permissions for Compliance Management

16. Permissions for the GDPR Toolbox
https://support.office.com/en-us/article/permissions-to-perform-tasks-in-the-gdpr-and-data-governance-
toolboxes-c713ccfd-9eb6-403a-b2f4-85013ec8f40f?ui=en-US&rs=en-US&ad=US

17. Microsoft Official Course
Intelligent tools to discover
and control your data

18. Intelligent tools to discover and control your data
Trust Center
Content Search
eDiscovery
Implementing DLP

19. Trust Center
https://www.microsoft.com/en-
us/TrustCenter/CloudServices/office365/GDPR

20. Trust Center

21. Intelligent tools to discover and control your data
Content search
Use Content Search to query for and
identify personal data using relevant keywords,
file properties, or built-in templates.

22. Find Personal Data – From SharePoint Files

23. Find Personal Data – from emails

24. Content search – Search for a particular user

25. Export Results and Reports

26. Exported data

27. eDiscovery

28. Searching for content and configuring Hold

29. PowerShell for Search and Delete
#Create a search
New-ComplianceSearch -Name "remove emails from-to
PaulSmith@contoso.com" -ExchangeLocation all -ContentMatchQuery
'(from:PaulSmith@contoso.com) OR (to:PaulSmith@contoso.com)'
#Start the search
Start-ComplianceSearch -Identity "remove emails from-to
PaulSmith@contoso.com"
#Check the Search Status
get-ComplianceSearch -Identity "remove emails from-to
PaulSmith@contoso.com"
#Delete Content
New-ComplianceSearchAction -SearchName "remove emails from-to
PaulSmith@contoso.com" -Purge -PurgeType SoftDelete

30. Implementing DLP

31. Microsoft Official Course
SharePoint Features for
GDPR compliance

32. SharePoint Features for GDPR compliance
• SharePoint governance
• Managing Compliance
• Site Closure and Deletion
• Site Templates for Compliance
• Compliance Policy Center - Site Collections or
Templates
• Records Center
• In Place Records Management
• Managing external sharing

33. SharePoint governance
Enforce your policies and site lifecycle management.
Reduce the number of inactive and abandoned sites.
Increase information security.
Improve search performance and relevance.
Develop an External Sharing Expiration Service.
…

34. Create and configure a Records Center site
-It’s a Site Collection or Subsite
Content Organizer
Policies
Configure in-place records management
-Must activate “In Place Records Management” feature
-Can be done by:
Content Type or
Library and Folders
Implement Holds (policies)
Block Delete
Block Edit and Delete
Managing Compliance
https://support.office.com/en-us/article/implement-records-management-0bfe419e-eb1d-421a-becd-5be9fed1e479

35. Site closure policies
from Site Collection
Create a Site Policy
from the site / Subsite
Site closure and Deletion
Managing Compliance for Site Closure

36. Site Closure and Deletion – Policy Template

37. Site Closure and Deletion – Assign the policy to a Site

38. Site Closure and Deletion – Assign the policy to a Site

39. Site Templates for Compliance
New in SharePoint 2016 and online, is the ability to
create compliance policies. The Compliance Center
site template can be a useful way to centralize
policies related to city, state, federal, or other
business rules and regulations.
Unlike other site templates, a Compliance Center
template must be created from SharePoint Central
Administration before it can be used by a site
collection administrator or site owner.

40. Site Templates for Compliance

41. Compliance Policy Center - Site Collections or
Templates
Deletion Policies can then be assigned to site
collections or templates.

42. Deletion Policies for Site Collections or Templates

43. Deletion Policies for Site Collections

44. Deletion Policies for Site Templates

45. Records Center
The Records Center is a site template which provides tools
for records management. A record can be any document
that needs to be routed and retained for a certain amount
of time. The Records Center uses a Drop Off Library that can
be accessed from the front page by using the Submit a
Record button
The Records Center site has built-in tools that allow
documents to be automatically routed based on specific
metadata. Library folders are the primary repository for
these documents. Documents are routed to the correct
library folder using the Content Organizer.

46. Records Center – New Site Collection

47. Records Center

48. In Place Records Management
Records Management can be done through a Records
Center, or at a specific library within
the site collection. The feature can be activated at the site coll
ection level and then can be implemented within a library.
Site collection features

49. In Place Records Management – Document Library

50. In Place Records Management – Document Library

51. In Place Records Management – Document Library

52. In Place Records Management – Document Library

53. In Place Records Management – Content Types

54. In Place Records Management – Content Types

55. In Place Records Management – Content Types

56. In Place Records Management – Content Types

57. In Place Records Management – Content Types

58. In Place Records Management – Content Types

59. In Place Records Management – Content Types

60. In Place Records Management – Content Types

61. In Place Records Management – Content Types

62. In Place Records Management – Content Types

63. In Place Records Management – Content Types

64. Managing external sharing
External sharing is the ability to invite people outside of
Microsoft to collaborate in a SharePoint site.

65. Microsoft Official Course
Exchange Features for
GDPR compliance

66. Exchange Features for GDPR compliance
Disable users ability to export to PST
Retention Policy / Auto archive or Delete
Disable Auto forward to external Recipients
ActiveSync policies for smart phones
Place a mailbox on Litigation Hold
Data Loss Prevention (DLP)

67. Disable users ability to export to PST
Download Office 2016
Administrative Template
files (ADMX/ADML) and
Office Customization
Tool
Disable the Import /
Export button with
Group Policy

68. Retention Policy and Tags
Default Policy Tag Retention Policy Tags Personal Tags
Retention tags are
linked to a retention
policy
The retention
policy applied to
user mailboxes

69. Configuring retention tags and policies

70. Configuring retention tags and policies

71. Configuring retention tags and policies

72. Assign Retention Policy to a Mailbox

73. ActiveSync policies for smart phones

74. Place a mailbox on Litigation Hold

75. Place a mailbox on Litigation Hold

76. Data Loss Prevention (DLP)

77. *Webinar Survey