{"id":117,"date":"2018-07-06T11:37:07","date_gmt":"2018-07-06T11:37:07","guid":{"rendered":"http:\/\/accelforce.com\/solixBlog\/?p=117"},"modified":"2023-03-19T00:40:03","modified_gmt":"2023-03-19T07:40:03","slug":"gdpr-compliance","status":"publish","type":"post","link":"https:\/\/www.solix.com\/blog\/gdpr-compliance\/","title":{"rendered":"GDPR compliance: Don\u2019t forget about Personal and PII data in your non-production environments","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\n

W<\/span>ith GDPR now in full effect<\/a>, organizations and governments still have a lot of work and learning to do. In particular, many businesses are hard at work checking off all of the boxes for GDPR compliance with the complex, multi-faceted law.<\/p>\n

Currently, we\u2019re seeing the majority of organizations\u2019 resources being invested into products that assist DPOs (Data Privacy Officers) or GDPR compliance teams, in an effort to better discover Personal and PII data, assess production systems, and implement new data regulation procedures across their customer-facing production systems.<\/p>\n

However, in my experience of working with many organizations on their GDPR implementations, one area, in particular, is overlooked: PII data that is currently sitting in non-production environments. To become fully GDPR compliant, organizations must have a comprehensive understanding of their entire enterprise data landscape \u2014 this means not just external-facing environments and applications that collect PII data, but also the non-production systems such as legacy, development, test, and archive.<\/p>\n

Common data platform<\/h3>\n

A common data platform <\/a>(CDP) or unified framework stores all production and non-production data into a centralized repository, where full regulatory compliance and control can be effectively applied. Data managed by a CDP can then be analyzed and scanned to determine whether or not it is PII, and reports can be executed, ensuring that any GDPR requests are satisfied quickly in their entirety.<\/p>\n

These frameworks are enabled with the help of technologies like Hadoop (also popularly coined \u201cBig Data\u201d), which are designed to store and process all types of data en masse across the whole organization, including databases, emails, documents, media, IoT, and more. Hadoop\u2019s ability to store data \u201cas is\u201d, encrypt data at rest, and apply control provides an easy route to enforcing GDPR requirements within a secure and centralized location. Innovative search tools such as Elastic Search and SOLR enable access to data stored within the archive repository quickly.<\/p>\n

Going beyond GDPR Compliance<\/h3>\n

Beyond GDPR compliance, adopting a modern enterprise archive and application retirement<\/a> project can result in huge cost savings, and provides a foundation for information lifecycle management.<\/p>\n

As organizations scramble to tick off all of their GDPR boxes, they must ensure to thoroughly examine all facets and areas, including business, IT, and C-level executives. With time and maturity, I am confident that organizations and governments will be able to work together to better protect their customer\u2019s data by way of a common data platform or unified framework.<\/p>\n<\/div>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

With GDPR now in full effect<\/a>, organizations and governments still have a lot of work and learning to do. In particular, many businesses are hard at work checking off all of the boxes for GDPR compliance with the complex, multi-faceted law. (more)<\/a><\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":7,"featured_media":118,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[39],"tags":[38,21,20,46,71],"coauthors":[],"class_list":["post-117","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-gdpr","tag-cdp","tag-compliance","tag-gdpr","tag-pii-data","tag-solix-cdp"],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/posts\/117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/comments?post=117"}],"version-history":[{"count":0,"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/posts\/117\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/media\/118"}],"wp:attachment":[{"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/media?parent=117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/categories?post=117"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/tags?post=117"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.solix.com\/blog\/wp-json\/wp\/v2\/coauthors?post=117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}