General Data Protection Regulation: a matter everybody has to deal with but… - 6 years ago

May 25th, 2018 is a date to remember for all companies, with regard to data protection, the hottest topic in the Information Security domain:  a new regulation issued by the European Union, the so called “General Data Protection Regulation”, better known as GDPR, will enter into force (see www.eugdpr.org for all the details) and will have an impact, low or high it doesn’t matter, on every organisation dealing with EU citizens.

The intention by the EU with this regulation is to better “protect and empower all EU citizen data privacy”. Nevertheless, a strict interpretation of GDPR when implementing all its articles could bring companies to limit their view and interventions to data treatment and storage, focusing only on improvements for few of their processes.

On the contrary, GDPR is a tremendous opportunity to rethink the full strategy in data protection, with an holistic approach that starts from the acknowledgement of the related business risks and pursuits as goal the customer AND the company interests and rights together.

In order to support effectively banks to collect this opportunity, it is of utmost importance to have a pragmatic and programmatic approach in the assessment and solution design phases.

At Blue Wave Sourcing, we have designed a frame to perform a light assessment to produce evidences of the AS IS, preparing the field to the work of  specialists in Information Security, like Advanction (see www.advanction.com for details) , which we acknowledge to have the right specialists and tools able to achieve in this very complex area.