Data privacy requirements necessitate not only identifying the location and nature of impacted data, but also the flow and transformation that it takes throughout the application landscape.
A great explanation and worth a read just to make sure you really understand the topic.
This is a blog containing data related news and information that I find interesting or relevant. Links are given to original sites containing source information for which I can take no responsibility. Any opinion expressed is my own.
Showing posts with label GDPR. Show all posts
Showing posts with label GDPR. Show all posts
Friday, 20 December 2019
Monday, 21 October 2019
Logs were our lifeblood. Now they're our liability by/via Normcore Tech
What happens when we collect too much data?
It's not like the old days - we need to mask certain data, even delete some data due to GDPR, but logs can be a great source of information too. I've worked on loading telephone call logs so you can see the number of phone calls a salesrep has made, how long they lasted, and who they were too. All useful data. Yes you need to archive them, make changes to them, but they can be great sources of information.
It's not like the old days - we need to mask certain data, even delete some data due to GDPR, but logs can be a great source of information too. I've worked on loading telephone call logs so you can see the number of phone calls a salesrep has made, how long they lasted, and who they were too. All useful data. Yes you need to archive them, make changes to them, but they can be great sources of information.
Tuesday, 27 November 2018
Understanding the new ePrivacy Regulation and how it differs from GDPR by Christian Auty via @infomgmt
The ePR is expected to address electronic communications, including text messages, email, chat applications and IoT devices. Think of the ePR as the traffic cop for data as it travels between controllers and processors governed by GDPR.
This is an insightful article by Christian that I think is a good high level analysis of the differences between the two.
This is an insightful article by Christian that I think is a good high level analysis of the differences between the two.
Tuesday, 18 September 2018
Key steps to ensure data protection amidst the growth of mobile apps by Nathan Sykes via @infomgmt
As data protection regulations grow and the laws become more stringent, it has also become much more difficult to follow them because of widespread mobile adoption.
Some useful pointers to steer you in the right direction.
Some useful pointers to steer you in the right direction.
Tuesday, 11 September 2018
Master data management is not the answer to GDPR compliance by Aaron Zornes by @infomgmt
By themselves, neither data governance nor MDM offer sufficient capabilities to meet GDPR requirements. Together, we are much more empowered as an organisation.
This article contains some really interesting points that I had not realised. Worth reading and thinking about - maybe they are true in your own organisation and you are not aware and may need to make some changes.
This article contains some really interesting points that I had not realised. Worth reading and thinking about - maybe they are true in your own organisation and you are not aware and may need to make some changes.
Wednesday, 5 September 2018
GDPR compliance the perfect opportunity to modernise data architecture by Amandeep Khurana via @infomgmt
Compliance with the data privacy and security mandate enables organisations to become more agile in their product and service development and rollouts, and more efficient and effective in their ability to respond to market trends and competitive threats.
Yes this is exactly right - everything has to turn onto it's head and be data centric not application centric. I think we need to concentrate on:
WHERE is the data created
WHERE is it also stored (so where is it interfaced to)
HOW it is updated
WHAT changes when it is updated
HOW do you delete the data in ALL systems?
I would suggest you do something like a data flow diagram so you can document all of this for every piece of data.
Yes this is exactly right - everything has to turn onto it's head and be data centric not application centric. I think we need to concentrate on:
WHERE is the data created
WHERE is it also stored (so where is it interfaced to)
HOW it is updated
WHAT changes when it is updated
HOW do you delete the data in ALL systems?
I would suggest you do something like a data flow diagram so you can document all of this for every piece of data.
Thursday, 5 July 2018
If you thought GDPR was bad – Just wait for ePrivacy Regulation by Lisa Loftis via @infomgmt
Regulators developed ePR because the volume and complexity of digital data are increasing exponentially and the environment for generating, storing and consuming it can be quite different from more traditional formats.
I like this explanation although as the author states it is still being negotiated at the moment. I'm sure the recent Facebook data problem has given many a clearer perspective on the need for some form of standard and documentation.
I like this explanation although as the author states it is still being negotiated at the moment. I'm sure the recent Facebook data problem has given many a clearer perspective on the need for some form of standard and documentation.
Monday, 2 July 2018
For SMBs, GDPR could be the best thing that ever happened to data by Kris Lahiri via @infomgmt
New regulatory compliance helps businesses retain users, promotes company innovation and provides an opportunity to overhaul obsolete systems, making them more efficient and driving long term growth.
I have to admit I never really thought to the same depth as Kris has because I was more fixated on the cost that SMB would have to bear without much in the way of benefits to make it a more worthwhile exercise. So this article is good for remind us of the advantages SMBs will get from GDPR compliance.
I have to admit I never really thought to the same depth as Kris has because I was more fixated on the cost that SMB would have to bear without much in the way of benefits to make it a more worthwhile exercise. So this article is good for remind us of the advantages SMBs will get from GDPR compliance.
Monday, 18 June 2018
For GDPR late-comers, data mapping, security are key first steps by Steve Weil via @infomgmt
Despite having two years to prepare, and the deadline to do so now past, many organisations are still struggling with how to comply with the data management mandate.
I would add that it is a great time to update or start some form of data management. It is also vital that you remember interfaces and reports - especially their output - in order to make sure that data is handled and deleted effectively across your whole business.
I would add that it is a great time to update or start some form of data management. It is also vital that you remember interfaces and reports - especially their output - in order to make sure that data is handled and deleted effectively across your whole business.
Monday, 4 June 2018
Data mapping: A key challenge in achieving GDPR compliance by Laszlo Dellei via @infomgmt
With the 25 May compliance deadline now upon us, there is simply not enough time for manual mapping. There are, however, some alternatives organisations can turn to.
I used to do this as my day job and it's really interesting understanding the journey of data through and organisation, how it is used, what it is called everywhere (so many synonyms) and how it is changed as it is on that journey (text, number, decimal, number, etc). Then you need to work out where that documentation is going to be entered and who is going to have access to it.
I used to do this as my day job and it's really interesting understanding the journey of data through and organisation, how it is used, what it is called everywhere (so many synonyms) and how it is changed as it is on that journey (text, number, decimal, number, etc). Then you need to work out where that documentation is going to be entered and who is going to have access to it.
Tuesday, 29 May 2018
How will the GDPR impact machine learning? by Andrew Burt via @OReillyMedia
Answers to the three most commonly asked questions about maintaining GDPR-compliant machine learning programs.
This article is very clear and easy to understand. I think it explains answers to a few key questions in a clear and concise manner with a good level of detail.
This article is very clear and easy to understand. I think it explains answers to a few key questions in a clear and concise manner with a good level of detail.
Monday, 9 April 2018
Thanks to Facebook, expect GDPR to spread beyond the EU by Lisa Loftis via @InfoMgmt
The strong and immediate reaction to this data misuse incident should serve as a warning shot for all companies collecting and using consumer personal data.
I agree with this article - the GDPR legislation doesn't seem that difficult now if you want to preserve your reputation and survive going forward. This Facebook disaster should serve as a lesson to other companies as to what could happen to them if they are not careful.
I agree with this article - the GDPR legislation doesn't seem that difficult now if you want to preserve your reputation and survive going forward. This Facebook disaster should serve as a lesson to other companies as to what could happen to them if they are not careful.
Tuesday, 3 April 2018
Will GDPR Make Machine Learning Illegal? by Gregory Piatetsky via @kdnuggets
Does GDPR require Machine Learning algorithms to explain their output? Probably not, but experts disagree and there is enough ambiguity to keep lawyers busy.
It sounds like it could be a job creation scheme for lawyers and legislators in the future. I think it might also mean that organisations need to change their privacy policies in order to cover the use of data in ML and get customers to agree to it in order to protect the use going forward.
It sounds like it could be a job creation scheme for lawyers and legislators in the future. I think it might also mean that organisations need to change their privacy policies in order to cover the use of data in ML and get customers to agree to it in order to protect the use going forward.
Monday, 19 March 2018
Get the data basics right by Toni Sekinah via @TheDataIQ
Get the basics right, use incoming regulation as a stimulus to innovate, and choose the right tools to manage the data. Those are the three key conclusions drawn by credit reference agency Experian from a recent survey, "Embracing the data challenge in a digitalised world".
Definitely if you have to do the work anyway due to some kind of regulation you should use it as an opportunity to make some steps forward at the same time. This reduces the overall cost of any improvement as the regulation changes are under a different cost bucket.
Definitely if you have to do the work anyway due to some kind of regulation you should use it as an opportunity to make some steps forward at the same time. This reduces the overall cost of any improvement as the regulation changes are under a different cost bucket.
Thursday, 15 March 2018
Implementing a real-time catalogue of enterprise data assets by Suresh Chandrasekaran via @infomgmt
Beyond defining access privileges, effective data governance means that companies need to be able to document or label their data assets, much like the labels on pharmaceuticals.
Automatic data cataloguing is a great aim and could if done correctly save a lot of time.
Automatic data cataloguing is a great aim and could if done correctly save a lot of time.
Tuesday, 13 March 2018
Looming GDPR puts renewed focus on Sarbanes-Oxley compliance by Larry Alton via @infomgmt
SOX is a perfect bridge protocol for organisations undergoing a General Data Protection Regulation compliance audit in preparation for the May 2018 deadline.
Having worked on SOX I can understand the authors comment and the connection. It's certainly a good discipline that can be added to and expanded for GDPR compliance.
Having worked on SOX I can understand the authors comment and the connection. It's certainly a good discipline that can be added to and expanded for GDPR compliance.
Friday, 23 February 2018
WEBINAR: Why your MDM single customer view will fail GDPR - 1 March 2018
Why your MDM single customer view will fail GDPR
March 1, 2018 | 2 PM ET/11 AM PT
Hosted by Information Management
Hosted by Information Management
With GDPR, you must now be able to pinpoint every single record pertaining to every EU customer and prospect across all your databases and applications – with extreme precision.
That’s an extremely tough challenge given the many nickname variations, address errors, digit transpositions, and other data quality issues so commonplace in today’s enterprise. And traditional “uncertain = no match” methods won’t enable you to avoid GDPR’s high-stakes downsides – especially when it comes to Article 17 “Right to Erasure.”
Attend this interactive expert-led webinar to learn:
- How to accurately assess your real risk of inadequate record-matching
- 3 best practices for bringing record-matching up to GDPR-readiness
- The importance of EU-centric third-party data validation
| Ed Allburn Founding President & CEO Data Delta (Presenter) | Charles Gaddy Director of Global Sales & Alliances Melissa Data (Presenter) | Lenny Liebmann Contributing Editor SourceMedia (Moderator) |
Sponsor Content From:

Register here
Monday, 15 January 2018
GDPR could drive sweeping changes in how organisations manage information by Bob Violino via @infomgmt
A new study finds that nearly three in four organisations plan to incentivise employees to improve data hygiene and take accountability for compliance.
This generally points to a need for companies to get their act together and sort this out before they end up in serious trouble.
This generally points to a need for companies to get their act together and sort this out before they end up in serious trouble.
Thursday, 11 January 2018
WEBINAR: Proactive Compliance: Applying virtualised Graphs to address the challenge of GDPR - 16 Jan 2018
Web Seminar Proactive Compliance: Applying virtualized Graphs to address the challenge of GDPR
Jan. 16, 2018 | 2 PM ET/11 AM PT
Hosted by Information Management
Hosted by Information Management
Data governance requirements such as the relatively new General Data Protection
Regulation (GDPR) for enterprises doing business with Europe are driving a need
to better understand customer data assets and where they reside within the organization.
Businesses are collecting mountains of personal data about their customers that, when
organized effectively, offers the potential to reduce regulatory and compliance risk and expenses.
Many organizations store information in data warehouses, MDM hubs or more recently, data lakes.
However, with such systems collecting hefty streams of data on a daily basis, wading through and
determining what information is relevant for compliance initiatives such as GDPR is a daunting task.
A key approach is to develop an agile single view solution, understanding relevant data
assets and their quality and suitability for purpose. Clearly, the ability to collaborate on
whiteboard style models with maps of existing data assets to these models, and an
ability to profile directly against these models to evaluate their relevance is key. A
complete solution based around Graph provides a natural way to model these requirements
and understand the Enterprise Metadata Graph.
In this webcast you will learn how to:
- Adopt a proven approach that develops an agile single view & enterprise metadata management strategy around Graph databases.
- Deliver a model that is far quicker to implement & more agile than prior IT capabilities
- Enable governance of key data assets such as customer data with an eye towards key business drivers such as GDPR.
| Aaron Wallace Principal Product Manager Pitney Bowes (Presenter) | Aaron Zornes Chief Research Officer The MDM Institute (Moderator) |
Sponsored By:

Register here
Thursday, 23 November 2017
WEBINAR: 7 GDPR “Gotchas” and how to avoid them - 28 November 2017
Web Seminar 7 GDPR “Gotchas” – and how to avoid them
Nov. 28, 2017 | 2 PM ET/11 AM PT
Hosted by Information Management
Hosted by Information Management
As GDPR deadlines loom, most data managers are already working to ensure compliance. But
the first wave of GDPR compliance efforts reveal some serious potential GDPR “gotchas.”
And many of these “gotchas” are the result of basic misconceptions about what compliance really requires.
Protect yourself and your organization by attending this interactive expert-led webinar. You’ll learn:
- How European business partners can expose you to unanticipated risk
- What the “data portability” requirements of GDPR really require
- Why you need to select and empower an EU representative ASAP
| William Beckler GDPR Compliance Lead ALICE (Speaker) | Lenny Leibmann Contributing Editor SourceMedia (Moderator) |
Sponsored By:
Register here
Subscribe to:
Posts (Atom)