The European Union General Data Protection Regulation is a huge culture change for those U.S. companies doing business within the EU or with EU citizens, and those who store these users' data in the United States. And it's coming in less than a year. Join an accomplished panel, including a practitioner from Europe and hear about how to prepare for GDPR, what companies must implement, enforce and measure. We'll also explore compliance controls and how that will change the workforce behavior, while allowing EU citizens access to data.
Learning Objectives:
Question: If a US based company does not directly market to the EU but does have data regarding EU citizens (think hospitals, insurance, finance) where the EU citizen is currently living in the US, do they need to concern themselves with GDPR? What would be the DPA that they would have to report to? Under what authority could the EU-DPA assess penalties?
Thank you!