Ovum Report: Making Sense of Compliance: Data Protection in the EU and Beyond

The European Union's (EU) General Data Protection Regulation (GDPR), a set of requirements imposed on organizations to guarantee the privacy of information on EU citizens that is in their possession, comes into force across all 28 member countries on May 25, 2018. The GDPR covers all organizations, regardless of whether they have operations within the EU, requiring various organizational changes, such as the appointment of a data protection officer (DPO), and imposing potentially hefty fines for data breaches. It seeks to embed the concept of “data protection by design” into organizational management and operations for organizations that acquire personal data. In this white paper, Ovum looks at the impact of the new regulation on all firms operating in the EU, and how technology can help these firms comply with the regulation.