This is the foundation of all GDPR compliance and involves identifying and reporting the exact location of all personal data you have, in all its varied and vague formats. That’s no small feat for any company, but it is especially challenging for large, global organizations with petabytes of data moving across cloud and on-premises environments. Learn how Dataguise can help.

The “right of access” mandate in the GDPR gives individuals the right to know what data you hold about them, how and why it is being used and accessed, and by whom. You must be able to retrieve and present this information without delay. Learn how Dataguise can help.

The existence of appropriate safeguards, such as pseudonymization or encryption, may help you retain personal data for business processing by you or a third party, and will also reduce your compliance burden in the event of a data breach. At the same time, you must be prepared to erase personal data when individuals exercise their “right to be forgotten.” Learn how Dataguise can help.

You’ll need to notify your supervisory data authority and/or affected data subjects as early as 72 hours after becoming aware of a high-risk data breach. As soon as possible you should be able to pinpoint exactly which data was exposed, how and when the unauthorized access occurred, and the measures you’ve taken to mitigate adverse effects. Monitoring personal data more precisely will help speed time to resolution. Learn how Dataguise can help.

In addition to documenting data protection policies and processing activities, you may need to keep track of which people or systems are accessing personal data, whether inside or outside your organization. Data transfers to third parties or countries may also require additional documentation of technical security measures. Learn how Dataguise can help.