Thread: GDPR

Who's going to be ready for this in May then?

It transpires that if you want to do business with the EU, you're expected to be as compliant as they are.

This means that if you handle any data on EU citizens (and I assume that means even things like CVs for example), you have to provide the same access, right to object, right to edit, right to delete, etc.

Sounds like it could be a real mess.

Naturally I've bunged it straight at our legal department.




https://www.helpnetsecurity.com/2018.../gdpr-problem/

What's the going rate for a GDPR Officer in a non-warzone, tropical country?

It's a Data Protection Officer and it will probably be a nice little earner anywhere on account of there aren't any and there certainly aren't going to be enough by May.

Slightly more responsibilities IMHO.

"Article 39 of the GDPR assigns very specific technical tasks to the DPO, related to the monitoring of compliance with the regulation and interpreting the results of data protection impact assessments (DPIAs). Additionally, the GDPR requires that the DPO report to the highest level of management in the company. ....

While it’s likely we’ll begin to see coalescence around where the DPO sits and who they report to, the most critical factor is having strong relationships between the legal, IT and cyber security teams – particularly because there are elements in GDPR around reasonableness of controls, the “state of the art” and the cost to implement controls (as defined in Article 32 and mentioned again in Article 25) where cyber security expertise is crucial."


With a possible fine for non-compliance of 4% of a companies Global revenues/claim, a "nice little earner" is an understatement.

"With the GDPR deadline looming on May 25, 2018, every organization in the world that transmits data related to EU citizens is focused on achieving compliance. And for good reason. The ruling carries the most serious financial consequences of any privacy law to date – the greater of 20 million EUR or 4 percent of global revenue, potentially catastrophic penalties for many companies."

But here's the money shot, for those who can write a ICO.GDPRCoin available it seems.An ideal candidate for distributed network.

This

"In some cases, such as with smaller organizations, appointing a third-party virtual DPO may be the ideal answer. Articles 37 and 38 of GDPR specifically enable organizations to leverage a DPO through a service contract, provided the DPO is readily accessible to the client."

Some blockchain/GDPR articles:

https://coinspectator.com/news/138960/are-financial-institutions-ready-for-blockchain-and-gdpr

https://www.coindesk.com/blockchains...ons-explained/

Too late Entity have the market.They do seem to have opportunities though.

https://www.entitygroup.com/gdpr-data-strategy-two-sides-coin/

the GDPR requires that the DPO report to the highest level of management in the company

So all you have to do is bullshit the CEO and you can probably write your own cheque.

Worked for me many a time. After 4 or 5 years boardroom suspicious arise though and you need another patron. Usually when the CEO, who hired you, also "accepts a new role elsewhere".

Originally Posted by OhOh

Worked for me many a time. After 4 or 5 years boardroom suspicious arise though and you need another patron. Usually when the CEO, who hired you, also "accepts a new role elsewhere".

I think I've seen off.... let me count... about 9 CEOs in my time. Got a great one at the moment. He'll be all over this like a cheap suit. The eu20 million is one thing, the 4%, well that's a disaster waiting to happen.

For those who haven't heard, the grisly details are here:

https://gdpr-info.eu/

Reminds me of the Y2k feeding frenzy. Made a lot of money providing consulting services for it.

Originally Posted by Norton

Reminds me of the Y2k feeding frenzy. Made a lot of money providing consulting services for it.

That was hilarious. Software vendors slapping "Y2K Version" on their old software and doubling the price.

You're right though. E&Y and their ilk must be wanking themselves silly at the thought of how much money they're going to make.

A Newsnow link to current GDPR stories in the press.


NewsNow: GDPR news | Breaking News & Search 24/7

Seems like an EU wheeze to hit all the "global leading companies" who infringe EU citizens human rights.

Originally Posted by OhOh

Seems like an EU wheeze to hit all the "global leading companies" who infringe EU citizens human rights.

Or a nice little earner.

The UK will be writing into British law in May.