DHR is well-prepared for GDPR. For more information, here is our overview.

1. GDPR Overview
DHR INTERNATIONAL
MAY 2018

2. Copyright © 2018 DHR International, Inc. All Rights Reserved. 2
GDPR Overview
Main principles of the regulations include:
■ Fair, lawful, and transparent processing of personal data
■ Specified, explicit, and legitimate purposes for the collection and processing of personal data
■ Personal data that is adequate, relevant, and limited to what is necessary in relation to the
purposes of the processing
■ Personal data is accurate and is kept up to date
■ Personal data is kept only as long as necessary
■ Personal data is processed in an appropriate manner to maintain security of the data
General Data Protection Regulation (GDPR): a set of European data
protection mandates that are enforceable as of May 25, 2018

3. Copyright © 2018 DHR International, Inc. All Rights Reserved. 3
GDPR at DHR
■ DHR requires new hires to sign acceptable use and confidentiality
policies as a part of onboarding. The company provides data privacy
training sessions to new hires, and recurring training to all employees
thereafter.
■ DHR utilizes a Dillistone FileFinder CRM database to store candidate and
client records. FileFinder meets or exceeds information security
requirements for GDPR. The application also includes native support for
GDPR compliance functions, including:
– Logging of consent/legitimate interest communications
– Deletion of protected data if requested
– Other data retention and audit requirements
DHR International remains committed to the secure, confidential
processing of personal data
People
Process
Technology

4. Copyright © 2018 DHR International, Inc. All Rights Reserved. 4
GDPR at DHR
■ DHR is updating its privacy policy, information security policy, disaster
recovery and business continuity policies—among others—to align with
data privacy best practices
■ DHR operates under the guidance of a data protection officer
■ DHR is able to sign standard contractual clauses which address the
transfer of protected data between entities
■ Individual subject access requests directed to DHR may be addressed to
SAR@dhrinternational.com
■ DHR’s updated privacy policy will be available at
http://www.dhrinternational.com/privacy-policy on or before May 25
DHR International remains committed to the secure, confidential
processing of personal data
People
Process
Technology