Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
j_M007
Community Champion
‎11-12-2018 03:14 PM
‎11-12-2018 03:14 PM

Have organizations factored GDPR risk into their business impact analysis (BIA) computations?

Many organizations in the non-Euro zone seem to be sluggish at best to react to the GDPR stipulations about personal data protection. Many treat personal data as theirs to do with it as they please.

 

Are non-Euro organizations waking up to the very real business impact of dara exfiltration by not performing due diligence and due care?

 

On the one hand reading the GDPR is "quaint"; on the other hand the "cough" dissuasive measures are catastrophic. 

 

A few Monday musings.

Reply
2 Replies
Flyslinger2
Community Champion
‎11-13-2018 09:48 AM
‎11-13-2018 09:48 AM

If countries can't agree on a cyber pact how do companies get the leadership they need to adopt GDPR? 

Reply
0 Kudos
j_M007
Community Champion
‎11-13-2018 10:23 AM
‎11-13-2018 10:23 AM

True enough in the realm of cyber space, especially since each nation has its own cyber defense initiatives..

 

Trouble with GDPR , however,is that according to EU rules, noncompliance can be very costly for scofflaws.It's more an issue of protection of personal data (PII, PHI, among others.) 

 

What's more, is that the GDPR is the baseline legislation; there is leeway for each of the Euo Member States to chime in with their own national legislation.

 

Failure to take due care can set organizations up for "dissuasive" measures, and since the European Economic Area economy is colossal (second largest in the world) ignoring GDPR might not be the best risk strategy.

Reply
0 Kudos