The GDPR is wrongly cast as a mere legal obligation. Instead it sets forth principles that should inform business activity at any level, especially in IT. This is a laboratory to help people in IT better understand their role in the GDPR landscape, and what they can do to help their organisation profit from a greater respect of the fundamental rights and freedoms that Surveillance Capitalism sees as a mere resource to exploit.

1. GDPR
For
Nerds
Talk 75 @IHC2018
DataKnightmare

2. GDPR Myths
●
Stuff for Legal/interns
●
Only concerns EU citizens
●
Law is too slow for tech
●
Boooring…

3. …guess who governs information?
Well…

4. EU Elsewhere
EU citizen
Foreigner
Where/For Whom GDPR?

5. GDPR is for Adult IT

6. 15(+1) Ways IT Can Help
1. Function Chart (≠ org chart!)
2. Register of software
3. Register of archives
4. Function vs. SW
5. Function vs. Archive (incl. db’s)

7. 15(+1) Ways IT Can Help
6. Data Minimization
7. Retention
8. Consent Tracking
9. Privacy By Design
10. Privacy By Default

8. 15(+1) Ways IT Can Help
11. Admin logs (seriously)
12. Password policies
13. Access policies
14. Backup policies
15. Decommissioning policies

9. ...one more thing..

10. 16. Check effing links

11. Thank you.
Questions?
DataKnightmare@[Twitter, Mastodon, Spreaker, Patreon]
CC-BY-SA 4.0 Walter Vannini
“Breaking Free of Screens version 2” ©2009 Andy Singer, used with permission