In January 2016, the European Commission had passed the GDPR, which will take effect in May 2018. One of the main purposes is to harmonize European Data Protection law. The new regulation will automatically take effect, without any need for ratification by local governments. The impact of the GDPR will be strong and it is time now to define a "roadmap for compliance". In this talk, KuppingerCole´s Legal Analyst Dr. Karsten Kinast, LL.M will explain the core components of GDPR and discuss with you those areas, where your organization will be affected.
Key Takeaways:
The EU GDPR presents several stringent requirements for processors, especially in a cloud environment. Those requirements include identifying the categories of privacy data, the risks and the controls, and the audit capability. This keynote will include a discussion of how to prepare for this, and a discussion of the current NIST research into an audit language that can be utilized by cloud providers that is being planned to meet the audit requirements.
Key Takeaways: