This document discusses the General Data Protection Regulation (GDPR) which takes effect on May 25, 2018. It will apply to all companies and gives individuals new rights around accessing and deleting their personal data. It also requires companies to implement privacy by design and notify authorities within 72 hours of a data breach. The document also outlines debates around whether previous policies were sufficient, concerns about spam and data breaches, and arguments that individuals will just click through privacy notices as well as whether the EU can enforce fines. However, supporters argue that the GDPR will push companies to improve security, be more transparent about what data they hold, demand more from third parties, and give individuals better control over their personal information.

1. {elysiumsecurity}
GDPR DEBATE
Version: 1.2a
Date: 27/06/2018
Author: Sylvain Martinez
Reference: ESC8-MUSCL
Classification: Public
cyber protection & response

2. {elysiumsecurity}
cyber protection & response
2
GDPR KEY FACTS
Public
ALL COMPANIES
RIGHT TO ACCESS
4% OR €20 MILLION
RIGHT TO BE FORGOTTEN
PRIVACY BY DESIGN AND BY DEFAULT
72H REPORTING
25TH OF MAY 2018

3. {elysiumsecurity}
cyber protection & response
3
GDPR DEBATE
Public
GAME CHANGERSO WHAT?
• PREVIOUS POLICIES/REGULATIONS GOOD
ENOUGH;
• Y2K ”APOCALYSPE” ALL OVER AGAIN;
• GDPR SPAM;
• WHOIS DATA FOR INVESTIGATION IS
GOING AWAY;
• THERE WILL STILL BE DATA BREACH;
• PEOPLE ARE JUST GOING TO CLICK YES TO
DISCLAIMERS;
• WILL THE EU REALLY BE ABLE TO ENFORCE
THE FINES?
• PUSHED COMPANIES TO PAY ATTENTION
TO SECURITY;
• PUSHED COMPONIES TO PAY ATTENTION
TO WHAT DATA THEY HAVE
• COMPANIES WILL DEMAND MORE FROM
3rd PARTIES HANDLING THEIR DATA;
• DATA WILL BE MORE SECURE;
• LESS SPAM;
• BETTER DATA CONTROL FOR INDIVIDUALS;
• THERE WILL BE LESS DATA BREACH
• DATA SECURITY INCIDENTS RESPONSE
WILL BE BETTER;
Icons from the Noun Project unless stated otherwise

4. {elysiumsecurity}
cyber protection & response
© 2018 Elysium Security Ltd.
All Rights Reserved
www.elysium security.com
ElysiumSecurity provides practical expertise to identify
vulnerabilities, assess their risks and impact, remediate
those risks, prepare and respond to incidents as well as raise
security awareness through an organization.
ElysiumSecurity provides high level expertise gathered
through years of best practices experience in large
international companies allowing us to provide advice best
suited to your business operational model and priorities.
ABOUT ELYSIUMSECURITY LTD.
ElysiumSecurity provides a portfolio of Strategic and Tactical
Services to help companies protect and respond against Cyber
Security Threats. We differentiate ourselves by offering discreet,
tailored and specialized engagements.
Operating in Mauritius and in the United Kingdom,
our boutique style approach means we can easily adapt to your
business operational model and requirements to provide a
personalized service that fits your working environment.