How to make your creative business GDPR compliant by May 2018

•

0 j'aime•426 vues

What you need to know about the General Data Protection Regulation and how to implement such GDPR in your creative business

Droit

What you need to know about
the General Data Protection
Regulation
How to make your fashion
business GDPR compliant by
May 2018:

2
Why the GDPR?
How to make your fashion business GDPR compliant by May 2018

3
When will the GDPR enter into force?
How to make your fashion business GDPR compliant by May 2018

4
What is at stake? Which organisations are impacted by the
GDPR?
How to make your fashion business GDPR compliant by May 2018

5
What are the GDPR provisions about?
How to make your fashion business GDPR compliant by May 2018

6
GDPR provisions in a nutshell
1. Privacy by design
2. Accountability
3. Privacy impact assessment
4. Data protection officer
5. Profiling
6. Right to be forgotten
7. Other individuals‘ rights
How to make your fashion business GDPR compliant by May 2018

7
Is there a silver lining to the GDPR?
How to make your fashion business GDPR compliant by May 2018

8
GDPR silver lining?
• Manage data assets
• Lower formalities
• One-stop DPA
• Unified regulations
• Easier data transfers
• Fairer competition
• Labels and certifications
How to make your fashion business GDPR compliant by May 2018

9
What actionable steps to take to become GDPR compliant?
How to make your fashion business GDPR compliant by May 2018

10
GDPR actionable steps
• Assign ownership
• Liaise with one-stop DPA
• Draft map of data processes
• Value data processes + treatments
• Execute a PIA on high-risk data assets
• Implement legal, technical, organisational and physical
measures
• Ensure contractors are compliant
• Do privacy awareness training
• Develop a Bring Your Own Device Policy
• Check/redraft information notices + confidentiality policies
• Put in place automated mechanisms
• Put in place solid management plan in case of data
breaches
How to make your fashion business GDPR compliant by May 2018

11
How to make your fashion business GDPR compliant by May
2018: What you need to know about the General Data
Protection Regulation
Annabelle Gauberti
Crefovi
Founding partner
annabelle.gauberti@crefovi.com
@Crefovi on Twitter
How to make your fashion business GDPR compliant by May 2018

Contenu connexe

Tendances

Stressing about GDPR? Key Facts

BizSmart Select

Organisations in the not-for-profit sector are facing increased scrutiny of their arrangements for information security. New regulatory standards, such as GDPR, will place information governance higher than ever before on the senior management agenda. Balancing the obligations around personal information with cost-effective protection will have major implications for current systems. In this session sector specialists from Adapta Consulting will discuss the frameworks and controls that need be in place

Microsoft dynamics 365 for small and medium sized charities - session 2 gdpr

m-hance

SharePoint and GDPR Compliance

SysKit Ltd

The State of Marketing Technology Today The State of Marketing Technology Today

Ghostery, Inc.

With just one hour of your time and a few free tools, you could be increasing your membership every month. To learn how, join our free webinar on November 16th with Jason Jensen, data-driven marketing evangelist and nonprofit consultant. Jason will show you the tried-and-tested process that any nonprofit can use to increase membership and donations using data-driven marketing. Even if you’ve never measured a single campaign, you’ll be able to implement these strategies.

Jason summit slides (1)

Wild Apricot

Retain Social provides real-time monitoring and archiving of social media, instant messaging, and web search data on-prem or in the cloud. Retain Social monitors and archives every end user keystroke. If a policy violation occurs, the end user will be alerted of the violation. The violation is then archived into Retain and the administrator is notified of the violation. In addition, all archived data can be instantly searched, retrieved and reviewed from one central location enabling a complete overview of social media, mobile, IM, search, and email communication.

Retain Social Presentation 2015

GWAVA Man

Tech Connect Live 30th May 2018 ,GDPR Summit Sharon o' reilly

Events2018

Payslip gdpr deck nov 2017

Aoife Flynn

IoT: Security & Privacy at IGNITE 2015

Hildebrand Technology

Ignite 2015 - IoT Security and Privacy

joshuacooper

Παρουσίαση του κ. Κώστα Γκρίτση στην εκδήλωση που πραγματοποίησε ο Κύκλος Ιδεών για την Εθνική Ανασυγκρότηση σε συνεργασία με το Ίδρυμα Διεθνών Νομικών Μελετών- Καθηγητού Ηλία Κρίσπη και με την υποστήριξη της Ελληνοαμερικανικής Ένωσης, με θέμα: «Προστασία Προσωπικών Δεδομένων - Ηλεκτρονική Ταυτοποίηση» Διαχείριση Προσωπικών Δεδομένων μετά την υιοθέτηση του νέου Γενικού Κανονισμού (GDPR) και Ηλεκτρονική Ταυτοποίηση με τη χρήση του δικτύου eIDAS (eID_EU): Επιχειρησιακές, τεχνικές και θεσμικές συνέπειες την Τετάρτη 14 Μαρτίου 2018, στο Θέατρο της Ελληνοαμερικανικής Ένωσης Στη συζήτηση συμμετείχαν: Λίλιαν Μήτρου, Πανεπιστήμιο Αιγαίου - Πολυτεχνική Σχολή Κωνσταντίνος Χριστοδούλου, Πανεπιστήμιο Αθηνών - Νομική Σχολή Αντώνης Στασής, Υπουργείο Διοικητικής Ανασυγκρότησης - Διεύθυνση Ηλεκτρονικής Διακυβέρνησης Χρυσούλα Μιχαηλίδου, ΕΕΤΤ, Νομική Υπηρεσία Γιώργος Παπασταματίου, FORTH-CRS Κώστας Γκρίτσης, MICROSOFT Φερενίκη Παναγοπούλου-Κουτνατζή, Πάντειο Πανεπιστήμιο – Σχολή Δημόσια Διοίκησης Συντόνισε ο Πέτρος Καβάσαλης, Πανεπιστήμιο Αιγαίου - Πολυτεχνική Σχολή & Κύκλος Ιδεών για την Εθνική Ανασυγκρότηση https://ekyklos.gr/ev/581-14-3-2018-prostasia-dedomenon-ilektroniki-taftopoiisi.html

14.3.2018, Παρουσίαση Κώστα Γκρίτση στην εκδήλωση «Προστασία Προσωπικών Δεδομ...

ekyklos Κύκλος Ιδεών για τη Εθνική Ανασυγκρότηση

Winning with analytics - Data Innovation Summit 2015 - Made in Belgium

Python Predictions

Want to migrate from one technology platform to another? Seems simple. Done so many times, this initiative still sounds like a deja vu to lot of teams and executives in organizations big and small, flat or hierarchical or matrix management culture. First principle - Socialize, engage, educate, evangelize and get the buy in of direct and in-direct stakeholders. How do you go through all that using a disciplined approach? Check this out. Feel free to contact me for clarifications anytime via info @ ValueRealizationInc.com

Migration approachquestionnaire checklist

Nandeep Nagarkar

Slides from my CIO Summit talk on the impact of EU General Data Protection Regulations. Quick take away: GDPR is not a technology challenge as such, there is no single piece of software to meet its requirements. It is more about people and your organisations processes. IT alone will not successfully achieve compliance. The regulation promotes good information management. If the opportunity is take it is a great opportunity to engage with different parts of business such as marketing.

CIO Summit talk: EU GDPR

John Culkin

GDPR Healthcheck

Paul Webb-Jones

Based on online data, GDPR fines increased by 40% in 2020, compared to the previous years since the law came into force, and they are expected to increase even more in the upcoming years. In this light, organizations are facing challenges when it comes to compliance with the increased number of data privacy laws and regulations worldwide. The webinar covers • ISO/IEC 27701 standard and its requirements • GDPR requirements and principles mapped against ISO/IEC 27701 • An overview of CCPA requirements • Upcoming US privacy laws Find out more about ISO training and certification services Training: https://pecb.com/whitepaper/iso-27001-information-technology--security-techniques-information-security--management-systems---requirements https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27701 Webinars: https://pecb.com/webinars Articles: https://pecb.com/article Whitepapers: https://pecb.com/whitepaper ------------------------------------------------------------------------------- For more information about PECB: Website: https://pecb.com/ LinkedIn: https://www.linkedin.com/company/pecb/ Facebook: https://www.facebook.com/PECBInternational/ Slideshare: http://www.slideshare.net/PECBCERTIFICATION YouTube video: https://youtu.be/QGqJsh4kedM Website link: https://pecb.com/

GDPR vs US Regulations: Their differences and Commonalities with ISO/IEC 27701

PECB

Cyber Liability Coverage - Chiropractic Malpractice Insurance

jessica01077

Watch the webinar on-demand: https://info.trustarc.com/72-hours-notice-incident-response-management-under-gdpr-webinar.html Best practices and suggested tools for addressing Articles 33 and 34 of the GDPR. The GDPR calls for significant changes in how companies plan for and respond to a data breach. This webinar will provide best practices and suggested tools for addressing Articles 33 and 34 of the GDPR. Register NOW for this on-demand webinar as we discuss key items such as: - Addressing the new 72 hour notification requirement - Revising your security policies - Launching new employee training programs #trustarcGDPRevents To register for upcoming/on-demand webinars visit: https://www.trustarc.com/events/webinar-schedule/

72 Hours Notice: Incident Response Management under the GDPR [Webinar Slides]

TrustArc

Tendances (18)

Stressing about GDPR? Key Facts

Microsoft dynamics 365 for small and medium sized charities - session 2 gdpr

SharePoint and GDPR Compliance

The State of Marketing Technology Today The State of Marketing Technology Today

Jason summit slides (1)

Retain Social Presentation 2015

Tech Connect Live 30th May 2018 ,GDPR Summit Sharon o' reilly

Payslip gdpr deck nov 2017

IoT: Security & Privacy at IGNITE 2015

Ignite 2015 - IoT Security and Privacy

14.3.2018, Παρουσίαση Κώστα Γκρίτση στην εκδήλωση «Προστασία Προσωπικών Δεδομ...

Winning with analytics - Data Innovation Summit 2015 - Made in Belgium

Migration approachquestionnaire checklist

CIO Summit talk: EU GDPR

GDPR Healthcheck

GDPR vs US Regulations: Their differences and Commonalities with ISO/IEC 27701

Cyber Liability Coverage - Chiropractic Malpractice Insurance

72 Hours Notice: Incident Response Management under the GDPR [Webinar Slides]

Similaire à How to make your creative business GDPR compliant by May 2018

Data Rights and Privacy - Mark Gracey

Eventz.Digital

In this first edition, the head of Match-Maker Ventures' GDPR align focus area Christoph Prager will translate the regulatory framework into business language and give recommendations for organizations departing on their GDPR journey. Joining us for this one-hour session will be Monika Kuschewsky, partner from Squire Patton Boggs' Data Privacy and Cybersecurity practice. She will share her views on GDPR and data protection, which she gained from over 15 years of working with organizations all over the globe. In particular, she will highlight the implications that the growth of IoT devices and "Bring your own device"-policies at companies have on data protection.

MMV Webinar 1. GDPR Perspectives. November 2017

Match-Maker Ventures

GDPR - what you need to know

Maddie Malling-May

What changes for Internet of Things technologies with the EU Data Protection ...

Giulio Coraggio

CWIN17 telford gdpr – threat, overhead or opportunity - doug davidson

Capgemini

Is your business GDPR ready?

Gareth Miller

General Data Protection Regulation

Pete S

The Marketing Guide to GDPR Compliance

Steven Macdonald

The European Union (EU) is implementing GDPR (General Data Protection Regulation) on May 25, 2018. Organizations who offer goods or services to EU residents or monitor the behavior of EU residents must comply, or they may incur significant financial penalties. Are you ready? Time is running out to ensure you comply with the new requirements. In this webinar presentation, Dean Evans, Satori Consulting to learn what the GDPR requirements mean for your organization, plus get a practical guide to achieving GDPR readiness including how to implement processes to satisfy the privacy rights of individuals. Dean will cover: => What is GDPR? => Common GDPR misconceptions => Key considerations => How to develop a plan of action => Process owners as data stewards

A practical guide to GDPR preparation

Promapp Solutions

In the first part of the Flash Friday webcast series, we talk about the importance of Data Quality for GDPR compliance. Enforcement of the General Data Protection Regulation (GDPR) begins in May of 2018. View this webcast on demand to learn why Data Quality is critical for GDPR compliance and how Data Quality simultaneously benefits GDPR compliance and business growth. This webcast and all related materials are provided for informational purposes only, and are not intended to provide, and should not be relied on for, legal advice pertaining to the subject matter. If you have specific questions on how this may affect your organization you should consult your legal advisor.

Flash Friday: Data Quality & GDPR

Precisely

As one of the largest processors and controllers of global information, IBM has embarked on a global program towards GDPR compliance readiness. Using the same methodology, services, and solutions as it does with clients, this session will demonstrate how this process can serve as a model for GDPR for any large enterprise. How this model can then be a basis to help comply with all other regulatory needs and be a framework for future business transformation and opportunity. Specifics will include: • A summary to the needs and opportunities of the GDPR regulation • With the time left, where are you, what can still be done • A prescriptive phased methodology of execution • Core solution technical measures and capabilities • Key GDPR actionable outcomes by stakeholder The focus is on discovering, mapping, and managing personal data for GDPR, along with data protection and compliance, on Hadoop in a sustainable way. Speaker Richard Hogg, Global GDPR Evangelist, IBM

GDPR: the IBM journey to compliance

DataWorks Summit

Ritz 4th-july-gdpr

Exponential_e

1 -2-6 kista watson summit-gdpr ibm pov hogg-sm

IBM Sverige

Presentation -- GDPR Compliance: What Marketing Operations Need to Know (pptx)

Macromator Inc.

General Data Protection Regulation (GDPR) Compliance

accenture

12 steps to prepare for GDPR

Gary Chambers

GDPR for dummies

Benoît De Nayer

IAB Europe's GDPR Compliance Primer

IAB Europe

13687562.ppt

handywicaksono2

Are you ready with the GDPR?

ITLgroup_hu

Similaire à How to make your creative business GDPR compliant by May 2018 (20)

Data Rights and Privacy - Mark Gracey

MMV Webinar 1. GDPR Perspectives. November 2017

GDPR - what you need to know

What changes for Internet of Things technologies with the EU Data Protection ...

CWIN17 telford gdpr – threat, overhead or opportunity - doug davidson

Is your business GDPR ready?

General Data Protection Regulation

The Marketing Guide to GDPR Compliance

A practical guide to GDPR preparation

Flash Friday: Data Quality & GDPR

GDPR: the IBM journey to compliance

Ritz 4th-july-gdpr

1 -2-6 kista watson summit-gdpr ibm pov hogg-sm

Presentation -- GDPR Compliance: What Marketing Operations Need to Know (pptx)

General Data Protection Regulation (GDPR) Compliance

12 steps to prepare for GDPR

GDPR for dummies

IAB Europe's GDPR Compliance Primer

13687562.ppt

Are you ready with the GDPR?

Plus de Annabelle Gauberti

Crefovi - How to lawfully make your fashion brand omnichannel

Annabelle Gauberti

How to make your fashion brand lawfully omnichannel?

Annabelle Gauberti

ialci press release for Tranoi Men and Preview - Paris - January 2016

Annabelle Gauberti

How to efficiently & quickly fight for your IP rights in the fashion & luxury...

Annabelle Gauberti

What are the differences between intellectual property rights & trade secrets?

Annabelle Gauberti

How to protect the IP of luxury and fashion brands with other means than the ...

Annabelle Gauberti

Law of luxury goods series: How to protect personality and image rights? an o...

Annabelle Gauberti

Enforcing IPRs: a European concise guide for luxury and fashion businesses - ...

Annabelle Gauberti

Enforcing IPRs: a European concise guide for luxury and fashion businesses - ...

Annabelle Gauberti

Some advice to fashion and luxury businesses, from a barrister and solicitors practising in England & Wales and France, as well as a lawyer practising in Germany, specialising in intellectual property, on the practical steps to take in order to enforce one’s IPRS in France, Germany and the UK. Holger Alt, ialci Member of the Executive Committee - responsible for Germany – and Partner, von Boetticher

Enforcing IPRs: a European concise guide for luxury and fashion businesses - ...

Annabelle Gauberti

Law of luxury goods series: Case study – Converse v its competitors

Annabelle Gauberti

Law of luxury goods series: Kaldor v Lee Ann: is this a copy?

Annabelle Gauberti

Press release on seminar "intellectual property in the luxury and fashion sec...

Annabelle Gauberti

"Paradox of fashion" seminar - Paris - 7 November 2014

Annabelle Gauberti

How to market fashion & luxury products through celebrities & music bands: en...

Annabelle Gauberti

Cosmetics compliance summit: focusing on the legal aspects of the cosmetic pr...

Annabelle Gauberti

Luxe & propriété intellectuelle - Institut de recherche en propriété intellec...

Annabelle Gauberti

"Luxury and Intellectual property" - course done at HEC, Paris

Annabelle Gauberti

Fashion finance law webinar - London

Annabelle Gauberti

Fashion intellectual property law: how to protect, enforce & monetize your IP...

Annabelle Gauberti

Plus de Annabelle Gauberti (20)