Be prepared and compliant with GDPR

This page will help you to be more aware, get prepared and understand how log management can help you comply with GDPR.

The GDPR in brief

The General Data Protection Regulation's (GDPR) strict requirements and huge non-compliance penalties (€20 million or 4 percent of an organization's global annual turnover) make it stand out from all other regulations in the industry.

These requirements, which aim to provide individuals with more visibility over how their personal data is handled by enterprises, not only require organizations to enhance their security strategies to ensure data security at all levels, but also outline post-breach strategies to minimize the impact of attacks

The GDPR governs how an enterprise should: 

  • Collect personal data from data subjects. 
  • Secure data at various stages-at rest, in use, and during transmission.
  • Establish accountability for securing personal data.
  • React in case of a data breach.

The day the GDPR goes into effect, May 25, 2018, is fast approaching and it's high time for enterprises located in the EU or those that collect and process the personal data of EU citizens to take steps to comply with the GDPR. 

5 simple steps to GDPR compliance

Identify

First, learn how the GDPR defines "personal data." Then, inventory all the personal data that your enterprise handles based on business context.

Isolate

When you store personal data separately from the rest of the data in your organization, it's easier to set up the right access controls. Only those who are supposed to view or perform operations on personal data should have access to that data. 

Detect

In the event of a data breach, enterprises are expected to promptly detect and analyze what happened. Get notified whenever something goes wrong, such as data deletion or modification, or whenever there is an anomaly, such as continuous login failures due to a bad password on the database where data is stored. 

React

Deploy systems that can detect breaches in real time and combat attacks immediately with automated workflows. Prepare incident reports that provide detailed information on the impact of a breach, including the data that was breached, how the breach occurred, and measures taken to prevent similar breaches in the future. 

Audit

Track all access to files and folders or databases where personal data is stored. Don't forget to audit the activities and accesses of servers where the files/folders and databases reside. Any access or critical change to storage servers or the data itself—including permission changes, privilege escalations, unauthorized accesses, or data deletion and modification—should be audited to detect anomalies instantly.

GDPR resources

The GDPR handbook

Do you know what the GDPR means by 'technical and organizational measures', ‘personal data’, ‘controllers’, and ‘processors’ ? Read this guide to become familiar with the GDPR's terms and to learn the action plans that you'll need to follow to be GDPR compliant.

The GDPR solution book

Decrypt the GDPR's articles pertaining to personal data security. Learn how our solutions can be leveraged to ensure personal data safety, audit access to personal data, and monitor user activities in the systems where personal data is stored.

How we can help

Meet GDPR data security requirements with ease using our IT security solutions. Our IT security suite has tools that can help you effectively audit platforms where personal data is stored, identify unauthorized accesses and critical changes to personal data, detect data breaches in real time, mitigate breaches using a workflow, and generate post-breach incident reports.

Log360

A comprehensive SIEM solution that audits accesses and critical changes happening to databases that store personal data. Log360 alerts you instantly about anomalies and breaches, remediates breaches automatically, and helps you conduct forensic analysis and generate an incident report after a breach

DataSecurity Plus

A real-time file integrity monitoring solution that detects and alerts you about any critical changes to files or folders, including file creation, deletion, modification, renaming, permission changes, and more. It also has predefined file storage analysis reports to optimize your storage efficiency.