Current European Union (EU) Data Protection rules date back to 1995. The EU was keen to establish a new set of rules reflecting the current reality of data usage and in response to calls that existing laws were out of date. In January 2012, the European Commission made a proposal for a single harmonized General Data Protection Regulation (GDPR) across the EU.

After four years of intense negotiations, a political agreement on the GDPR was finally reached in December 2015. This was formally adopted into European law in May 2016 and companies now have two years to implement and conform to the new regulation, which will enter into force in 2018.

The evolving regulatory environment on cybersecurity and data protection offers both possibilities and challenges for IBM and its clients. The challenges range from governance to securing application and infrastructure.

IBM has extensive experience helping clients navigate regulatory environments in Europe – and around the world. We have done this successfully through consulting services and solutions and through our delivery of cloud and cognitive solutions. This paper reflects IBM’s general view of Europe’s new regulatory landscape. It is not, however, intended to be exhaustive and does not describe every procedure and technical detail that could be required.

The key to establishing preparedness in this new era lies in choosing the right partners for your organization, and being able to deploy appropriate security and data protection controls and procedures in a way that can be rapidly and readily demonstrated. IBM understands this is not just a technical challenge, but a challenge of governance and compliance, applications and infrastructure and assurance.

 

 

The paper explores:

  • The implications of the new GDPR
  • The new rights of data subjects
  • The new responsibilities for data controllers and processors
  • The transfer of personal data
  • How IBM can help
  • The new Network and Information Security (NIS) Directive

Watch the on-demand webinar: New Data Protection Law GDPR: Reality Bites!

More from Data Protection

How to craft a comprehensive data cleanliness policy

3 min read - Practicing good data hygiene is critical for today’s businesses. With everything from operational efficiency to cybersecurity readiness relying on the integrity of stored data, having confidence in your organization’s data cleanliness policy is essential.But what does this involve, and how can you ensure your data cleanliness policy checks the right boxes? Luckily, there are practical steps you can follow to ensure data accuracy while mitigating the security and compliance risks that come with poor data hygiene.Understanding the 6 dimensions of…

Third-party access: The overlooked risk to your data protection plan

3 min read - A recent IBM Cost of a Data Breach report reveals a startling statistic: Only 42% of companies discover breaches through their own security teams. This highlights a significant blind spot, especially when it comes to external partners and vendors. The financial stakes are steep. On average, a data breach affecting multiple environments costs a whopping $4.88 million. A major breach at a telecommunications provider in January 2023 served as a stark reminder of the risks associated with third-party relationships. In…

Communication platforms play a major role in data breach risks

4 min read - Every online activity or task brings at least some level of cybersecurity risk, but some have more risk than others. Kiteworks Sensitive Content Communications Report found that this is especially true when it comes to using communication tools.When it comes to cybersecurity, communicating means more than just talking to another person; it includes any activity where you are transferring data from one point online to another. Companies use a wide range of different types of tools to communicate, including email,…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today