So, you have a pretty good idea that your company is going to fall within the reach of the EU General Data Protection Regulation, and you know that means you're likely going to have to change some things about your data handling and reporting capabilities. But what? And where do you begin? This 12-step checklist from the U.K. Information Commissioner's Office provides a good starting point, beginning with making sure people in your organization are aware of the change in the law and the kind of impact it may have. The IAPP offers this resource and many others, including readiness assessments and a DPO Decision Tree, to determine whether your organization is required to have a data protection officer under the GDPR, on our EU General Data Protection Regulation page. Take a look at the full story link. (IAPP member login required.)
Full Story