Gdpr presentation inergy door maron meijer

PU R PO S E

• Give citizens back the control of their personal data

• Simplify the regulatory environment for international

business by unifying the regulation within the EU

All information relating to an identified or identifiable natural person

• Purpose registration

• Approval

• Removal

• Transfer

• Transparency & Correction

• Report breaches

• Security, including C,I,A and PIA

• Data privacy/protection officer

• “a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.”

• “without undue delay and, where feasible, not later than 72 hours after having become aware of it.”

I N E R GY C A N G E T YO U S TA RTE D

• Compliancy scan

• 5 days

• Gap analysis

• Action plan

I M PAC T

• Marketing

• Social media

• Analytics !

• …..

Removal from source system=

Removal from data warehouse

R E M OVA L O F H I ST O R I C A L DATA

Removal=>

Explicit action required !

Data Warehousewith complete

history retention

DRAW BAC K

We loose information for analytics

E XA M PLE

Client is removed from data warehouse

SO LU T I O N

Instead of removal….

Make anonymous

R E M OV E I D E N T I F Y I N G A SP E C T S

Be accurate: Alias is not allowed

Make sure no combination of remaining data is identifying

C A S E E XA M PL E

Zip code and house number can beidentifying of a natural person

3447 GW Woerden, 19

C A S E S O LUT I O N

3447 Woerden

Region analysis including clients

that exercised their ‘Right to be forgotten’