204 Days to GDPR Enforcement
It is offcially 204 days out from the enforcement of EU General Data Protection Regulation. There is not a day that passes where I don't have a conversation with an InfoSec or Cyber Risk professional about the topic.
For this reason I decided to document these conversations in miniature article format.
Todays countdown article is from a GDPR Programme Manager in Dublin who has covered every role within the illusive "GDPR Action Team" and from the daily conversations I have he is definitly one of the more knowledgeable professionals I engage with.
Q1. What is the ideal position for a business to be in at this point? 204 days out from the new EU GDPR coming into effect.
" Ideal position would be to have data mapped, gap analysis completed, gaps assessed against risk and remediation plan agreed." - GDPR Programme Manager
Q2. If a business was to start their journey to GDPR readiness today – what 3 things would you prioritise for them to realistically achieve by 25th May 2018?
"Data mapped, access requests and associated processes agreed along with all externally facing compliancy statements and finally agreements in place with all processors of your data." - GDPR Programme Manager
Q3. What is the most common status of businesses in Ireland (in your experience) at the moment in relation to GDPR Readiness?
A) Compliant
B) Clear Actions, roadmap defined and preparing
C) Unprepared with few actions
"IT depends on the sector and size of the business, types and volumes of data it processes and whether it is a controller or processor. In my opinion the status is somewhere between ‘unprepared and working through some actions. " - GDPR Programme Manager
I hope this miniature questionaire helps. Please comment below if you have any further insights or message me if you wish to discuss the GDPR market in Ireland right now.
Also, if you have any specific questions you would like me to ask please share them and I am happy to do so in my next miniature article.
All the best,
John