1.
Today
● What is the GDPR?
● Protected Data Types
● GDPR & Personal Data Rights
● GDPR Business Requirements
● Consequences of Non-Compliance
● 6 Steps to Becoming GDPR Compliant
● Personnel Training Requirements

2.
What is GDPR?
The General Data Protection Regulation (GDPR):
● Defines personal and sensitive data
● Details how personal and sensitive data must be handled
● Establishes fines for noncompliance
● Sets new requirements for breach notifications

3.
Protected Data Types
Personal Data
Information used to determine individual identities
Sensitive Personal Data
Special categories of personal data requiring strong
protections

4.
Personal Data Rights for EU Citizens
1. Consent for personal
data to be shared and
processed
2. Access to personal data
3. Right to be forgotten
4. Right to portability
5. Right to rectification

5.
GDPR Regulations Apply To
Data Processors
Entities processing data on behalf of the controller (Clouds)
Data Controllers
Entities deciding what personal data must be processed
and how processing will occur

6.
Business Regulations for EU Organizations
EU organizations may need to:
● Appoint a data protection officer
● Review data collection procedures
● Create a data protection awareness program
● Perform ongoing information audits
● Complete Data Protection Impact Assessments

7.
Business Regulations for Non-EU Organizations
Businesses with just one EU-
based client or employee are
subject to GPDR compliance

8.
Consequences of Non-Compliance
Fine Amount Reasons
2% of annual global revenue, or €10 million
(whichever is higher)
● Data breaches
● Not employing the services of a DPO
● Not conducting a DPIA
● Not keeping appropriate records
4% of annual global revenue, or €20 million
(whichever is higher)
● Failing to gain consent
● Not upholding consumer rights under
GDPR rules
● Moving data outside the EU within the
confines of Chapter 5 of the GDPR

9.
Meeting GDPR Compliance

10.
Meeting GDPR Compliance

11.
Meeting GDPR Compliance

12.
Meeting GDPR Compliance

13.
Meeting GDPR Compliance

14.
Meeting GDPR Compliance

15.
Other Impacts of Non-Compliance
● Cost of rectification
● Damaged company
reputation
● Lost consumer trust
● Declining share value

16.
Employee Training Requirements
GDPR mandates:
● Awareness raising and training of staff involved in the processing
operations (Article 37)
● Appropriate data protection training to personnel having
permanent or regular access to personal data (Article 43)

17.
Meeting GDPR Compliance with SecurityIQ
Privacy & EU GDPR training module including:
● GDPR definition & purpose
● Protected data types
● Information lifecycle
● Non-compliance consequences
● Data protection principles
● Personal data rights

18.
Meeting GDPR Compliance with SecurityIQ
Role-based Training
Data protection principles exercise
Personal data lifecycle exercise
Data use exercises
Data disposal exercise
Engaging exercises,
animations, voice
narration for better
results
Comprehensive library
100+ phishing simulation templates
100+ security awareness modules