LW-Privacy-GDPR-Compliance-Checklist信息安全资料.pdfVIP

GDPRComplianceChecklist

GeneralDataProtectionRegulation(GDPR)Checklist

OverviewoftheGDPR

TheGeneralDataProtectionRegulation(“GDPR”)comesintoforceon25May2018andhaswide-reachingimplicationsforbusinesses.

Critically,finesundertheGDPRwillbesignificant–regulatorsmaynowfinecompaniesuptoEUR20millionor4%ofglobalturnover

fornon-compliance.

Asaresult,businessdataprivacycompliancewillraiseissuessimilartoanti-corruptionandantitrustcompliance.

TheGDPRwillapplytocompaniesbasedbothinsideandoutsideofEurope,including:

companiesprocessingpersonaldatainthecontextofanEUestablishment

companiesofferinggoodsorservicestoEUresidents;

companiesthatmonitorthebehaviourofEUresidents;and

companiesprovidingservicestotheabove.

Dataisincreasinglycentraltobusinessoperations,anddataisobtainedfrommanysources.Thechangingnatureoftechnology,in

particularthroughtheincreasedconnectivityoftheinternetofthings,meansthatcompaniesarecollecting,processingandexploitingdatain

newandevolvingways.Complexsupplychainsalsomeanthatdataisincreasinglybeingcollectedbyoneparty,butbeingusedbyothers

withoutappropriateassurancesaboutthecollectionprocedure.Ifnotproperlymanaged,thisdatacanbeacriticalliability.

GDPRComplianceChecklist

ThisGDPRComplianceChecklistseekstoprovideahighleveloverviewofthekeyrequirementsoftheGDPR.

Thetablesummarisesthenatureoftheprovision,highlightsthemostimportantactionswhichorganisationsshouldtaketopreparefor

complianceandprovidesreferencetotherelevantArticleintheGDPR.Italsoidentifiesthefunctionsthatwillbeaffectedbythechangesin

lawandnotesthestakeholderswhichwillneedtobeinvolvedineachsetofactions.

LegalSecur