Achieving GDPR compliance post-Privacy Shield

Abstract

In May 2018, the General Data Protection Regulation (GDPR) became enforceable. The GDPR has changed the way that any entity conducting business with an EU country holds and processes data about EU citizens. As companies around the world embarked on a vast undertaking to meet the GDPR's list of requirements, more than 5,000 certified US organisations secured their seal of approval with respect to article 45 of the GDPR relating to data transfers through the EU-US Privacy Shield. Until recently, US organisations have been able to manage the private data of EU citizens under the protection of the EU-US Privacy Shield. But now that has been invalidated, many are left facing uncertainty and risk. This needs to be addressed quickly, and not just to remain compliant with the General Data Protection Regulation (GDPR). There is a great business opportunity for companies to address privacy issues now and it is much better to address privacy proactively, rather being summoned to court for taking the opposite stance, explains Sam Curry of Cybereason.