{"id":4347,"date":"2017-08-17T12:17:02","date_gmt":"2017-08-17T11:17:02","guid":{"rendered":"https:\/\/cybersmart.co.uk\/?p=4347"},"modified":"2017-08-17T12:17:02","modified_gmt":"2017-08-17T11:17:02","slug":"one-more-gdpr-post","status":"publish","type":"post","link":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/","title":{"rendered":"One more GDPR post"},"content":{"rendered":"\n\t\t<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t<div class=\"wp-block-wombat-hero-blog b-hero-blog has-color-night-100-background-color has-background\" style=\"margin-top:var(--wp--preset--spacing--section-spacing);margin-bottom:var(--wp--preset--spacing--section-spacing)\"><div class=\"b-hero-blog__inner\">\n\t\t<div class=\"wp-block-wombat-hero-blog-text b-hero-blog-text\"><div class=\"b-hero-blog-text__inner\"><h1 style=\"margin-bottom:var(--wp--preset--spacing--size-20);\" class=\"has-text-color has-color-porcelain-100-color wp-block-post-title\">One more GDPR post<\/h1>\n\t\t\n\t\t<div style=\"margin-bottom:var(--wp--preset--spacing--size-16);\" class=\"has-text-color has-color-porcelain-100-color wp-block-post-date has-20-font-size\"><time datetime=\"2017-08-17T12:17:02+00:00\">August 17, 2017<\/time><\/div>\n\t\t\n\t\t<div class=\"has-text-color has-color-porcelain-80-color wp-block-post-author-name\">Jamie<\/div><\/div><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-hero-blog-media b-hero-blog-media\"><div class=\"b-hero-blog-media__inner\"><\/div><\/div>\n\t\t<\/div><\/div>\n\t\t<\/div>\n\t\t\n\t\t\n\t\t\n\t\t<section class=\"wp-block-wombat-blog-post-content-container b-blog-post-content-container\" style=\"margin-bottom:var(--wp--preset--spacing--section-spacing)\"><div class=\"b-blog-post-content-container__inner l-container\">\n\t\t<div class=\"wp-block-wombat-blog-post-sidebar b-blog-post-content-container__sidebar sidebar\"><div class=\"sidebar__inner\">\n\t\t<div class=\"wp-block-wombat-blog-post-sidebar-col-1 sidebar__col-1\"><div class=\"sidebar__col-inner\">\n\t\t<div class=\"wp-block-button is-style-secondary\"><a class=\"wp-block-button__link wp-element-button\" href=\"\/blog\/\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--size-16)\">Back to blog<\/a><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<p class=\"has-20-font-size\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--size-16)\"><strong>Table of contents<\/strong><\/p>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-blog-post-toc b-toc b-toc--1\" data-nest=\"1\"><\/div>\n\t\t<\/div><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-blog-post-sidebar-col-1 sidebar__col-1\"><div class=\"sidebar__col-inner\">\n<div class=\"wp-block-wombat-resource-box-container-box b-resource-box-container-box swiper-slide has-color-night-100-background-color has-background\"><div class=\"b-resource-box-container-box__inner\">\n<h2 class=\"wp-block-heading is-style-3 has-color-porcelain-100-color has-text-color\" style=\"margin-bottom:var(--wp--preset--spacing--size-16)\">Want to speak with sales?<\/h2>\n\n\n\n<div class=\"wp-block-button is-style-text-blue-2\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/calendly.com\/sales_cs\/book-a-discovery-call-v2?utm_source=blogglobal\">Book a call<img loading=\"lazy\" decoding=\"async\" width=\"24\" height=\"24\" class=\"wp-image-769\" style=\"width: 24px;\" src=\"https:\/\/cybersmart.com\/wp-content\/uploads\/2024\/03\/arrow-right.svg\" alt=\"\"><\/a><\/div>\n<\/div><\/div>\n<\/div><\/div>\n\t\t<\/div><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-blog-post-content b-blog-post-content-container__content content\"><div class=\"content__inner\">\n<p>At every cyber security event, people talk about the new General Data Protection Regulation (GDPR). It seems as the Cyber Security industry is obsessed with this new law and makes sure that everyone else knows about it too. Companies, consultants and lawyers are hopping on the GDPR train, because there is a significant opportunity for new services and products. However, there is also a lot of misconception going around and scaremongering, which is stereotypical for the cyber security industry.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>After having attended 10+ talks on GDPR here is what I have learnt:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">1. It is a European Law, not a certification<\/h4>\n\n\n\n<p>GDPR applies to all European citizen&#8217;s and their data meaning that:<\/p>\n\n\n\n<ol>\n<li>Brexit does not change anything<\/li>\n\n\n\n<li>Organisations outside of the EU still need to comply if they store, handle or process data of European citizens and<\/li>\n\n\n\n<li>Companies can become compliant or &#8220;GDPR ready&#8221; but cannot become GDPR certified (yet).<\/li>\n<\/ol>\n\n\n\n<p>A law is very different to schemes like <a href=\"https:\/\/support.cybersmart.co.uk\/cyber-essentials\">Cyber Essentials<\/a> or a standard such as <a href=\"https:\/\/www.iso.org\/isoiec-27001-information-security.html\">ISO 27001<\/a>. Lots of companies would like to have an official stamp that demonstrates that they are GDPR ready, but unfortunately, that doesn&#8217;t exist yet.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">2. We don&#8217;t know the implications of GDPR yet<\/h4>\n\n\n\n<p>With GDPR coming to force next year, the cliff hanger to date has been the fact that the <a href=\"https:\/\/ico.org.uk\/\">Information Commissioners Office (ICO)<\/a> can issue massive fines &#8211; up to 4% of turnover or \u00a317 million. Lot&#8217;s of &#8220;fake&#8221; news suggest that the ICO will be making early examples of organisations for minor infringements or that maximum fines will become the norm. However, the point of GPDR is not to fine companies for data breaches. The idea behind this stricter data protection regulation is to put the consumers and citizens first, meaning that there is a shift to more ownership of someone&#8217;s data.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">3. Not every data breach is treated the same<\/h4>\n\n\n\n<p>Every data breach is equally unique like every company. That means that every company will have different consequences. It is evident that an organisation that is ISO 27001 certified and suffers a data breach will face different consequences than a business that doesn&#8217;t have any cyber security controls in place. This fact does not only apply to the financial fines, but also to business continuity, customer trust, etc. In general, it is important to demonstrate that your company is taking Cyber Security seriously, hence you may want to start implementing some Cyber Security controls.<\/p>\n\n\n\n<p>Controls are useful for every company, regardless the industry, size and type. To get started, create a data map and make sure you are super clear where, how and why you store data in the first place. Then think how you can protect the data, that you have to store. Data that is no longer used or needed should be deleted.<br>\nIf it gets too complicated, you may want to look into common frameworks such Cyber Essentials or ISO 27001, for some more guidance. That is usually a good starting point.<\/p>\n\n\n\n<p>In short: There is nothing to worry about the GDPR (yet?), as we don&#8217;t know what will happen in regards to breaches and fines. Start preparing now, become compliant and there is nothing you have to worry about.<\/p>\n\n\n\n<p>The ICO has published a series of blog posts around common myths that are worth reading. They can be found <a href=\"https:\/\/iconewsblog.org.uk\/tag\/gdprmyths\/\">here<\/a>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span style=\"font-weight: 400;\">Data protection obligations got you in a muddle? Get on top of them quickly and easily with the<\/span><a href=\"https:\/\/cybersmart.co.uk\/privacy-toolbox\/\"> <span style=\"font-weight: 400;\">CyberSmart Privacy Toolbox<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/h4>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/cybersmart.co.uk\/privacy-toolbox\/\"><img decoding=\"async\" src=\"https:\/\/cybersmart.co.uk\/wp-content\/uploads\/2020\/12\/1.02-1000X300-cybersmart-SAL-133137-1.jpg\" alt=\"CyberSmart Privacy Toolbox\" class=\"wp-image-65894\"\/><\/a><\/figure>\n<\/div><\/div>\n\t\t<\/div><\/section>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":4349,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[15,26],"tags":[21,22,56,57],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>One more GDPR post - CyberSmart<\/title>\n<meta name=\"description\" content=\"It seems as the Cyber Security industry is obsessed with this new GDPR law and makes sure that everyone else knows about it too\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"One more GDPR post - CyberSmart\" \/>\n<meta property=\"og:description\" content=\"It seems as the Cyber Security industry is obsessed with this new GDPR law and makes sure that everyone else knows about it too\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/\" \/>\n<meta property=\"og:site_name\" content=\"CyberSmart\" \/>\n<meta property=\"article:published_time\" content=\"2017-08-17T11:17:02+00:00\" \/>\n<meta name=\"author\" content=\"Jamie\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jamie\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/\",\"url\":\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/\",\"name\":\"One more GDPR post - CyberSmart\",\"isPartOf\":{\"@id\":\"https:\/\/cybersmart.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2017-08-17T11:17:02+00:00\",\"dateModified\":\"2017-08-17T11:17:02+00:00\",\"author\":{\"@id\":\"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04\"},\"description\":\"It seems as the Cyber Security industry is obsessed with this new GDPR law and makes sure that everyone else knows about it too\",\"breadcrumb\":{\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cybersmart.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"One more GDPR post\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cybersmart.com\/#website\",\"url\":\"https:\/\/cybersmart.com\/\",\"name\":\"CyberSmart\",\"description\":\"Complete Cyber Confidnence\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cybersmart.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04\",\"name\":\"Jamie\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cybersmart.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g\",\"caption\":\"Jamie\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"One more GDPR post - CyberSmart","description":"It seems as the Cyber Security industry is obsessed with this new GDPR law and makes sure that everyone else knows about it too","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/","og_locale":"en_US","og_type":"article","og_title":"One more GDPR post - CyberSmart","og_description":"It seems as the Cyber Security industry is obsessed with this new GDPR law and makes sure that everyone else knows about it too","og_url":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/","og_site_name":"CyberSmart","article_published_time":"2017-08-17T11:17:02+00:00","author":"Jamie","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Jamie","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/","url":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/","name":"One more GDPR post - CyberSmart","isPartOf":{"@id":"https:\/\/cybersmart.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#primaryimage"},"image":{"@id":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#primaryimage"},"thumbnailUrl":"","datePublished":"2017-08-17T11:17:02+00:00","dateModified":"2017-08-17T11:17:02+00:00","author":{"@id":"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04"},"description":"It seems as the Cyber Security industry is obsessed with this new GDPR law and makes sure that everyone else knows about it too","breadcrumb":{"@id":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/cybersmart.com\/2017\/08\/one-more-gdpr-post\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersmart.com\/"},{"@type":"ListItem","position":2,"name":"One more GDPR post"}]},{"@type":"WebSite","@id":"https:\/\/cybersmart.com\/#website","url":"https:\/\/cybersmart.com\/","name":"CyberSmart","description":"Complete Cyber Confidnence","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersmart.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04","name":"Jamie","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersmart.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g","caption":"Jamie"}}]}},"_links":{"self":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/posts\/4347"}],"collection":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/comments?post=4347"}],"version-history":[{"count":0,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/posts\/4347\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/"}],"wp:attachment":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/media?parent=4347"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/categories?post=4347"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/tags?post=4347"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}