GDPR-Jeudi-FR-aspects-technologiques.pdf

Here are the key points summarized:

General Principles

• Loyalty and transparency in data processing
• Legitimate interests pursued by responsible parties
• Collection of personal data
• Pseudonymization (privacy by design)
• Information communicated to the public and individuals concerned
• Exercise of individual rights
• Measures and procedures for data breaches

Existing Architectures: Key Issues

• Mapping entire information systems, including sub-processed services
• Adding metadata to each piece of personal data (date collected, reason for collection, processing methods)
• Origination of data (self-collected or obtained from third parties)

New Regulation => New Architectures… Solution

• Proxy solution for personal data

360° View: Coexistence and Centralization

• Two strategies:
  • Registre: consolidate data from different systems into a single point
  • Centralisation: create a "master record" for each client/user using MDM platforms

Emergence of New Services

• Proxy solution for personal data

Conclusion

• Implementation of GDPR concerns almost all enterprises
• Significant challenges to overcome to comply with the regulation
• Need for innovation and attention to exceptions
• Certifications and guides will be forthcoming, offering opportunities to improve information quality.