{"id":4292,"date":"2017-07-14T15:15:14","date_gmt":"2017-07-14T22:15:14","guid":{"rendered":"http:\/\/www.unifycloud.com\/?p=4292"},"modified":"2021-12-16T05:05:05","modified_gmt":"2021-12-16T05:05:05","slug":"gdpr-impact-cloud-services","status":"publish","type":"post","link":"https:\/\/www.unifycloud.com\/gdpr-impact-cloud-services\/","title":{"rendered":"How Does the GDPR Impact IT and Cloud Services?"},"content":{"rendered":"

How Does the GDPR Impact IT and Cloud Services?<\/h2>\n

In the previous blog, \u00e2\u20ac\u0153What is the GDPR\u00e2\u20ac\u009d<\/a> we discussed the implications of this law on an organization handling data that is considered as \u00e2\u20ac\u0153personal data\u00e2\u20ac\u009d where some of that data may be considered as \u00e2\u20ac\u0153sensitive data\u00e2\u20ac\u009d (e.g., racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning health; or data concerning sexual orientation). In this blog, we will focus on the implications on an IT organization that is affected by the GDPR, particularly when using Cloud Services.<\/p>\n

While enforcement of the regulation is still over a year away, GDPR compliance will not be a light lift. Complying with the GDPR is a business-wide challenge that will take time, tools, processes and expertise, particularly around IT. The requirements include greater data access and deletion rules, risk assessment procedures, a Data Protection Officer role for larger organizations, data breach notification processes and much more.<\/p>\n

To do all of this, organizations will need to make big changes, and potentially significant investments, in their privacy and data management practices covering both On-premises IT and Cloud Services. And, they need to begin now. As noted in the previous blog, failure to comply with the GDPR could prove costly \u00e2\u20ac\u201c as companies that do not meet the requirements could face reputational harm and substantial fines.<\/p>\n

The GDPR contains many requirements about the collection, storage, and use of personal information. This means not only how organizations identify and secure personal data in their systems, as well as in Cloud Services, but also how an organization: accommodates new transparency requirements, detects and reports personal data breaches, and how an organization trains privacy personnel and employees. Some of these IT-related implications, whether On-Premises or in the Cloud, include:<\/p>\n