How can I prepare for GDPR enforcement?

We encourage you to start preparing for the GDPR, and review your privacy & data security processes & policies to make sure that they are compliant, before May 2018. Listed hereunder are some points that you must consider:

• Geographical Application
  It may be applicable for organizations that exist within EU in addition to some organizations that are functioning outside of the EU but are processing personal data of EU citizens.
• Rights of End-Users
  Every organization that falls under GDPR must be aware of the End-Users whose personal data they’re processing. The GDPR would put in place stronger rights for End-Users, and the organizations must offer those rights.
• Data Breach Notifications
  Particularly those organizations that control personal data must put in place transparent processes to comply with the GDPR requirement to report any breach of data & adhere to the prescribed time frames. Rkimball will immediately alert the affected customers in case there is any data breach in our services.
• Data Protection Officer (“DPO”)
  As an organization you might have to appoint DPOs who would manage all issues pertaining to the processing of personal data.
• Data Processing Agreement (“DPA”)
  In situations where any personal data needs to be transferred outside the European Economic Area, there might be a need to sign DPAs to make sure that optimum protection is afforded to the data being transferred.
• Data Protection Impact Assessment (“DPIA”)
  DPIAs detail out the data processes of the organizations and the applied protective measures, specifically in case of high risk or sensitive data. For the data processing activities being carried out by the organizations, they’d need to file with the DPIA authorities.