Data Security

THE NEW GENERAL DATA PROTECTION REGULATION

What you need to know about GDPR (General Data Protection Regulation)

The EU, in order to protect individual privacy concerns, has overhauled the Data Protection regulation which is going to have a serious impact on business operations and IT. How organisations capture, store, manage and erase data now have to meet far more stringent requirements around transparency, security and consent.

At NCS we have been working closely with our customers to help them understand their new responsibilities under the regulation, and how to develop practical implementation.

The GDPR, coming into effect on May 25th 2018, demands higher standards of Database Administration in order to meet the requirements around storage, access, anonymisation and breaches. At NCS, we break this process up into 3 categories:

Key Action Points:

  • Educate key stakeholders

  • Understand the impact

  • Audit the information you hold

  • Inform others if data inaccurate

  • Have a defined privacy policy

  • Meet enhanced data access rights

  • Determine legal basis for processing

  • Consent driven data collection approach

  • Data Breach risk assessment

  • Assign a DPO if applicable

  • Determine international country lead

Get in Touch

Key risk areas: