LW-Privacy-GDPR-Compliance-Checklist信息安全资料 conv.docxVIP

GDPRComplianceChecklist

GeneralDataProtectionRegulation(GDPR)Checklist

OverviewoftheGDPR

? TheGeneralDataProtectionRegulation(“GDPR”)comesintoforceon25May2018andhaswide-reachingimplicationsforbusinesses.

? Critically,finesundertheGDPRwillbesignificant–regulatorsmaynowfinecompaniesuptoEUR20millionor4%ofglobalturnoverfornon-compliance.

? Asaresult,businessdataprivacycompliancewillraiseissuessimilartoanti-corruptionandantitrustcompliance.

? TheGDPRwillapplytocompaniesbasedbothinsideandoutsideofEurope,including:?companiesprocessingpersonaldatainthecontextofanEUestablishment

?companiesofferinggoodsorservicestoEUresidents;

?companiesthatmonitorthebehaviourofEUresidents;and?companiesprovidingservicestotheabove.

? Dataisincreasinglycentraltobusinessoperations,anddataisobtainedfrommanysources.Thechangingnatureoftechnology,inparticularthroughtheincreasedconnectivityoftheinternetofthings,meansthatcompaniesarecollecting,processingandexploitingdatainnewandevolvingways.Complexsupplychainsalsomeanthatdataisincreasinglybeingcollectedbyoneparty,butbeingusedbyotherswithoutappropriateassurancesaboutthecollectionprocedure.Ifnotproperlymanaged,thisdatacanbeacriticalliability.

GDPRComplianceChecklist

? ThisGDPRComplianceChecklistseekstoprovideahighleveloverviewofthekeyrequirementsoftheGDPR.

? Thetablesummarisesthenatureoftheprovision,highlightsthemostimportantactionswhichorganisationsshouldtaketoprepareforcomplianceandprovidesreferencetotherelevantArticleintheGDPR.Italsoidentifiesthefunctionsthatwillbeaffectedbythechangesinlawandnotesthestakeholderswhichwillneedtobeinvolvedineachsetofactions.

LegalComplianceHR

ITInformationServices

Insurance

SecurityProcurement

MarketingandCustomerRelations

PRComms

? Thi