Support
Search
Close this search box.

GDPR: A New Era towards Data Privacy

Simplifying GDPR Compliance with Microsoft Office 365: Key Steps and Tools

GDPR, or General Data Protection Regulation, is set to embark on May 25, 2018. This is the succession to the existing European Unions’ New Data Protection Law and follows the same guidelines, but strengthens individuals’ personal data privacy. It imposes new obligations on organizations that collect, handle or analyse personal data whether it is in the EU or outside. 89 percent of orgsGDPR was set to become a law in April 2016, but given the significant changes for the organization that will be needed to align with the regulation, a two-year transition period is included.

GDPR REVOLVES AROUND SIX FUNDAMENTALS:
  1. Requiring transparency on the handling and use of personal data;
  2. Limiting personal data processing to specified, legitimate purposes;
  3. Limiting personal data collection and storage to intended purposes;
  4. Enabling individuals to correct or request deletion of their personal data;
  5. Limiting the storage of personally identifiable data for only as long as necessary for its intended purpose;
  6. Ensuring personal data is protected using appropriate security practices.

MICROSOFT SIMPLIFIES THE GDPR PRINCIPLES FOR OFFICE 365 BY FOCUSING ON THE FOUR KEY STEPS:

  1. Discover – Identify what personal data you have and where it resides.
  2. Manage – Govern how personal data is used and accessed.
  3. Protect – Establish Security Controls to prevent, detect, and respond to vulnerabilities and data breaches.
  4. Report – Execute on data requests, report data breaches, and keep required documentation.

There are tools in Office 365 that can help you to address the requirements of GDPR, which will be discussed in later parts of this series. GDPR is applicable to organizations of all sizes and all industries within the EU, as well as organizations located in other parts of the world, like the US. Any organization that offers goods or services to or monitors the behavior of EU data will be impacted Image source: Beginning your General Data Protection Regulation (GDPR) journey for Windows Server, Microsoft, September 2017 Organizations not in compliance with GDPR will be fined upwards of €20 million or four percent of an organization’s annual revenue (whichever is higher).

THIS BLOG IS GOING TO START A SERIES COVERING THE OFFICE 365-SPECIFIC TOPICS BELOW AND WHAT YOU CAN DO TO PREPARE:
  1. O365 Security Score: Office 365 Secure Score is a security analytics tool which calculates your tenant’s security score based on existing security settings and behaviors compares them to a baseline asserted by Microsoft. This is available to O365 admins in the Security & Compliance administrator console.
  2. Advanced Data Governance: Intelligence and machine-assisted insights to help you find, classify, set policies on, and take steps to manage the data most important to your organization.
  3. Advanced eDiscovery: Process data quickly and easily with built in tools and machine learning technologies.
  4. Data Loss Prevention: Identify sensitive data from financial to medical and configure actions to protect it.
  5. Advanced Threat Protection: Help protect email against real time attacks, prevent phishing and stop new malware that hasn’t been defined in antivirus software.
  6. Advanced Threat Management: Identify high-risk usage, alert you of a potential breach and set track high risk actions.
  7. And more…

Ryan Williams | Practice Manager [email protected] 847-886-5721

Linkedin Instagram Facebook-f Youtube
Contact Us