There has been no shortage of EU General Data Protection Regulation one-year articles in the last week or two and with reason. It has been a game changer. It has required a lot of sweat and tears (hopefully no blood). And though May 25, 2018, may have ended the "ramping-up period," it "was hardly an ending," writes IAPP Data Protection Officer Rita Heimes, CIPP/E, CIPP/US, CIPM. "At the IAPP, we kept working into the summer and beyond to fine-tune new affirmative opt-in consent systems for marketing communication, upgrade our cookie notice and affirmative opt-in consent tool, touch up our data processing agreements, and upgrade our vendor vetting systems to match the EU General Data Protection Regulation’s enhanced standards around data processing." In this DPO Confessional, Heimes reflects on all the work in the past year and how the IAPP "spent time studying ourselves to see how it really works." 
Full Story