Current European Union (EU) Data Protection rules date back to 1995. The EU was keen to establish a new set of rules reflecting the current reality of data usage and in response to calls that existing laws were out of date. In January 2012, the European Commission made a proposal for a single harmonized General Data Protection Regulation (GDPR) across the EU.

After four years of intense negotiations, a political agreement on the GDPR was finally reached in December 2015. This was formally adopted into European law in May 2016 and companies now have two years to implement and conform to the new regulation, which will enter into force in 2018.

The evolving regulatory environment on cybersecurity and data protection offers both possibilities and challenges for IBM and its clients. The challenges range from governance to securing application and infrastructure.

IBM has extensive experience helping clients navigate regulatory environments in Europe – and around the world. We have done this successfully through consulting services and solutions and through our delivery of cloud and cognitive solutions. This paper reflects IBM’s general view of Europe’s new regulatory landscape. It is not, however, intended to be exhaustive and does not describe every procedure and technical detail that could be required.

The key to establishing preparedness in this new era lies in choosing the right partners for your organization, and being able to deploy appropriate security and data protection controls and procedures in a way that can be rapidly and readily demonstrated. IBM understands this is not just a technical challenge, but a challenge of governance and compliance, applications and infrastructure and assurance.

 

 

The paper explores:

  • The implications of the new GDPR
  • The new rights of data subjects
  • The new responsibilities for data controllers and processors
  • The transfer of personal data
  • How IBM can help
  • The new Network and Information Security (NIS) Directive

Watch the on-demand webinar: New Data Protection Law GDPR: Reality Bites!

More from Data Protection

Router reality check: 86% of default passwords have never been changed

4 min read - Misconfigurations remain a popular compromise point — and routers are leading the way.According to recent survey data, 86% of respondents have never changed their router admin password, and 52% have never adjusted any factory settings. This puts attackers in the perfect position to compromise enterprise networks. Why put the time and effort into creating phishing emails and stealing staff data when supposedly secure devices can be accessed using "admin" and "password" as credentials?It's time for a router reality check.Rising router risksRouters…

Preparing for the future of data privacy

4 min read - The focus on data privacy started to quickly shift beyond compliance in recent years and is expected to move even faster in the near future. Not surprisingly, the Thomson Reuters Risk & Compliance Survey Report found that 82% of respondents cited data and cybersecurity concerns as their organization’s greatest risk. However, the majority of organizations noticed a recent shift: that their organization has been moving from compliance as a “check the box” task to a strategic function.With this evolution in…

How to craft a comprehensive data cleanliness policy

3 min read - Practicing good data hygiene is critical for today’s businesses. With everything from operational efficiency to cybersecurity readiness relying on the integrity of stored data, having confidence in your organization’s data cleanliness policy is essential.But what does this involve, and how can you ensure your data cleanliness policy checks the right boxes? Luckily, there are practical steps you can follow to ensure data accuracy while mitigating the security and compliance risks that come with poor data hygiene.Understanding the 6 dimensions of…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today