6 months to go: what are the risks of non-compliance with the gdpr? [webinar slides]

© 2017 TrustArc Inc Proprietary and Confidential Information

PRIVACY INSIGHT SERIES

Summer / Fall 2017 Webinar Program


6 Months to Go: What are the Risks of

Non-Compliance with the GDPR?

November 15, 2017

https://iapp.org/resources/article/getting-to-gdpr-compliance-risk-evaluation-and-strategies-for-mitigation/

https://iapp.org/resources/article/getting-to-gdpr-compliance-risk-evaluation-and-strategies-for-mitigation



















© 2017 TrustArc Inc Privacy Insight Series - trustarc.com/insightseries

Today’s Speakers

Sam Pfeifle

Content Director

IAPP

[email protected]

Hilary Wandall, CIPP/E, CIPP/US, CIPM

General Counsel & Chief Data Governance Officer

TrustArc

[email protected]

2


Survey methodology

• 10-minute survey sent to readers

of the Daily Dashboard

• 498 responses

• 88 percent believe they are

within the GDPR’s jurisdiction

• Only those covered continued

3


Survey methodology

4


With which is it most risky not to comply?

• Operationalizing the right to be forgotten.

• Operationalizing data portability.

• Obtaining/managing user consent.

• Complying with international data transfer requirements.

• Preparing for data breach notification.

• Conducting data protection impact assessments.

• Establishing legitimate interest for data processing.

• Conducting data inventory/mapping.

• Maintaining records of processing (e.g. Article 30 reports).

• Managing data subject requests.

• Appointing a data protection officer (DPO).

5


With which is it most risky not to comply?

6


Compare that to perceived difficulty…

7


How will you mitigate that risk?

• Investing in privacy/data protection training.

• Increasing number of privacy staff.

• Investing in additional outside legal assistance.

• Investing in additional outside consulting

assistance.

• Investing in privacy/data protection technology.

• Continuing the status quo privacy program.

8


How will

you

mitigate

that risk?

9


How will

you

mitigate

that risk?

10


2017 sees

large

increases in

most of the

steps firms

say they’re

taking to

prepare for

GDPR

11


What is the biggest barrier to compliance?

• Inadequate budget.

• Lack of qualified privacy staff.

• Too little time.

• Complexity of the law.

• And shortage of technical tools.

12



13



14


When will you be compliant?

From June 2017 From Sept. 2017

15





Questions?




Contacts

Sam Pfeifle [email protected]

Hilary Wandall [email protected]


18

To register for Summer/Fall webinars and/or past webinar recordings

visit: www.trustarc.com/insightseries

Privacy Insight Series – 2017 Calendar




Thank You!

Register for the next webinar in our Series – December 6th

“Demonstrating Compliance & the Role of Certification Under the GDPR

6 months to go: what are the risks of non-compliance with the gdpr? [webinar slides]

Law