Core to the GDPR is an increased responsibility to have comprehensive insight and control of all your data assets. To do so, you must know what personal data you hold, its provenance, location and all the ways in which it is being used. Without visibility on all data held, it is much harder to respond to the GDPR requirements such as Access, Rectification and Data Portability present in a range of GDPR articles.
Have confidence that all disparate but related data points can be linked to an individual.
Maintain and record data lineage as a practice.
Showcase to the ICO a willingness to tackle all personal data within your organisation.
No need for lengthy infrastructure programs or consultancy engagements.
How confident are you in your organisation's ability to locate all the data for an individual across all of your databases, systems and documents? Could you do it within 30 days?
We know that meeting the requirements of the GDPR are challenging and so recommend looking at your Data Cataloguing today.
By understanding the quality, accuracy and location of your data, you can begin to plan the related tasks.