Advancing GDPR Compliance, Post-Schrems II, Using Data Classification - ERP Spain.com - España y América Latina

Over the past 20 years, data classification has consistently been proven effective in protecting sensitive data. Combining classification with modern Digital Rights Management (DRM) enables organizations to precisely define the “who”, “what”, “when”, and “where” of sensitive data access, promoting compliance with a wide range of cybersecurity and privacy mandates. In the wake of last summer’s Schrems II decision from the Court of Justice of the European Union, the “where” of access has become especially relevant for complying with the EU’s General Data Protection Regulation (GDPR). Schrems II mandates additional controls for the transfer of personal data out of the EU and controlling the “where” data can be accessed represents a powerful tool not only for complying with the GDPR, but for many other cybersecurity mandates. In this presentation, data protection technical and legal experts will discuss employing a combination of data classification and DRM for compliance with the GDPR and similar laws. Takeaways include: • A summary of the Schrems II decision and why it matters to you now • The relationship between classification and policy enforcement • Leveraging data classification and DRM for legal compliance – including the “where”