The following article provides an overview regarding the fundamental requirements of the GDPR and the obligations arising for companies and for the data protection officers and outlines a possible approach to comply with these requirements. In addition, the impacts of the regulation are discussed in the business intelligence context and it is shown, based on the example of the Microsoft SQL Server platform, how the requirements of the new EU Directive can be covered by features of modern database management systems.
CONCEPTS AND REQUIREMENTS OF THE GDPR
The EU General Data Protection Regulation (GDPR), which originally came into force in May 2016, has as such become legally fully enforceable since May 2018. Several years passed before the EU Commission, the EU Parliament and the EU Council of Ministers were able to agree in late 2015 to get a comprehensive reform for the strengthening and standardisation of the data protection for all Member States of the EU on its way. A lot of companies already utilised the 2-year transition period intensively and invested significant expenditures to become familiar with the new legal situation and to adjust their data processing processes from an organisational as well as from a technical perspective to the new legal framework conditions. Even though these legal framework conditions quite often were not completely new in comparison to the German Federal Data Protection Act, a completely new motivation for the implementation results due to the increase of the announced fines which can amount to up to 20 million euros or 4 % of annual revenues worldwide.
Read the complete article on novum online, the noventum newsdesk.
from the content:
Concepts and requirements of the GDPR
- Personal Data
- Implementation oft he GDPR
- Documentation obligations oft he GDPR
- Obligations to inform and disclose
- Obligations to protect the rights of data subjects
- Data protection obligations
- Accountability and notification obligations
Impact of the GDPR on Business Intelligence
Implementation of the GDPR with Microsoft SQL Server
- Hardening
- Authentification & Authorisation
- Dynamic Data Masking
- Row-Level-Security
- Transport Layer Security
- Transparent Data Encryption
- Always Encrypted
- Always On
- SQL Server Audit
Conclusion
noventum consulting GmbH is an international IT management consultancy.
Founded in 1996 in Münster, today noventum is represented in Münster and Düsseldorf with more than 100 employees. Independent noventum partner companies work in Istanbul and Luxembourg.
The managing partner is Uwe Rotermund.
noventum consulting supports its customers in their IT challenges and in their efforts for a modern corporate culture.
Customers are predominantly DAX companies as well as medium-sized companies and organizations with a large IT infrastructure.
noventum consulting GmbH
Münsterstraße 111
48155 Münster
Telefon: +49 (2506) 9302-0
Telefax: +49 (2506) 9302-23
http://www.noventum.de
Senior Consultant
Telefon: +49 (2506) 93020
Presse
Telefon: +49 (2506) 9302-0
E-Mail: matthias.rensing@noventum.de
