GDPR: it's big, but it's not impossible. With GDPR looming on the horizon, it’s understandable organisations might be worried. Few companies have stood up and declared compliance yet. Most are heads down identifying personal data and implementing plans for compliance. There are hurried glances at the clock as the time to 25 May ticks away; the reality of daunting fines comes ever closer.

1. 1© Cloudera, Inc. All rights reserved.
Establishing sustainable GDPR
compliance

2. 2© Cloudera, Inc. All rights reserved.
Your speakers today
Nick Curcuru
VP Data & Analytics
Wim Stoop
Sr. product marketing manager
Alan Rodger
Senior analyst

3. 4© Cloudera, Inc. All rights reserved.
Ovum view

4. tmt.knect365.com/ovum-industry-congress #OVUMIC @OvumLive Ovum Telecoms & Media Group
Successrequiresauthorityandcommitment
• Senior-level sponsorship is critical
• Compliance is a long-term (and costly) requirement
• Planning/operation need cross-discipline collaboration
• Legal / compliance
• HR / training
• Marketing
• IT / Architecture

5. tmt.knect365.com/ovum-industry-congress #OVUMIC @OvumLive Ovum Telecoms & Media Group
High-levelGDPRissuescrossfunctional
boundaries
• Privacy by Design and Privacy by Default
• Data Privacy Impact Assessments
• Data Breach Reporting
• Lawful basis for holding personal data
• Consent: operationalizing capture, and withdrawal
• Digital supply chain regulation
• Data sovereignty

6. 8© Cloudera, Inc. All rights reserved.
MasterCard implementation

7. 10© Cloudera, Inc. All rights reserved.
Mastercard Countdown to GDPR
2016 2017 20182015 2019+2014
Internal
Education begins
Joint Task Force
Created
Legal/ Product/Data
Usage
Deeper Data
Classification
Schema
Developed
Annual Data
Steward Review
Daily / Monthly /
Qtrly -Data Usage
Monitoring
Periodic Internal
Audits
Mandatory 3rd Party
AuditsMastercard implements
Binding Corporate Rules
New data access portal rolls out
to enable communications and
requests from individuals.
Data Inventory
is completed
based on new
schema
Metadata Inventory Capability Developed: Data Profile – Tagging – Monitoring – Catalog
Development (ongoing)
Annual GDPR
Metrics Review
Semi Annual
Employee
Education and
Training Classes
GDPR is a Board
Level Topic to be
reported at each
session
Identified and assessed
business functions,
products and 3rd Parties
GDPR will effect
Technology Review & Assessment
Product Redesign
Data Steward Review
From Article 29 - action plan – implementation - repeatable framework for GDPR

8. 11© Cloudera, Inc. All rights reserved.
Panel discussion

9. 13© Cloudera, Inc. All rights reserved.
1. PII <> GDPR regulated
data

10. 14© Cloudera, Inc. All rights reserved.
1. PII <> GDPR regulated
data
2. Not just about
customers

11. 15© Cloudera, Inc. All rights reserved.
1. PII <> GDPR regulated
data
2. Not just about
customers
3. Compliance = Customer
360

12. 16© Cloudera, Inc. All rights reserved.
1. PII <> GDPR regulated
data
2. Not just about
customers
3. Compliance = Customer
360
4. Not only technology and
process needed

13. 17© Cloudera, Inc. All rights reserved.
1. PII <> GDPR regulated
data
2. Not just about
customers
3. Compliance = Customer
360
4. Not only technology and
process needed
5. 25 May 2018 is only the
beginning

14. 18© Cloudera, Inc. All rights reserved.
1. PII <> GDPR regulated
data
2. Not just about
customers
3. Compliance = Customer
360
4. Not only technology and
process needed
5. 25 May 2018 is only the
beginning
6. Role of regulators

15. 19© Cloudera, Inc. All rights reserved.
1. PII <> GDPR regulated
data
2. Not just about
customers
3. Compliance = Customer
360
4. Not only technology and
process needed
5. 25 May 2018 is only the
beginning
6. Role of regulators

16. 20© Cloudera, Inc. All rights reserved.
Thank you