45 Useful and Informative GDPR Presentations & Resources
The months leading up to May 25, 2018 produced a steady barrage of articles urging organizations to get ready for the GDPR and warning about the consequences of failing to comply.
After May 25? . . . To be honest, not much. There are still lots of articles — “Tips For What Comes After,” “What to Watch For” — but no big stories. And therefore, it has been tempting to take a bit of a snooze.
But not so fast. Just because the headlines haven’t been filled with stories about violations and massive fines, that doesn’t mean you can sit back and do nothing if you’re operating within reach of the GDPR. The GDPR became fully enforceable on May 25, 2018, and fines for non-compliance can reach up to 20 million Euros or 4 percent of an organization’s annual global turnover for the preceding financial year, whichever is higher.
While it’s too early for these fines to have been imposed, it’s not too early to take another look at the GDPR and then strategically determine what you still need to do to ensure that your systems and processes are protecting your organization and your customers’ data.
Our advice? If you come under the GDPR — which is binding and applicable without the need for national governments to pass any enabling legislation — do your homework, shore up any deficiencies, and take whatever measures you need to become compliant or to maintain compliance.
And remember: While there are challenges to the GDPR, there are also opportunities, including the opportunity to create visibility and control over the data in your systems as well as the opportunity to build greater trust with your customers.
To help you out, we’ve put together this catalogue of 45 useful and informative resources that provide guidance on an extensive array of GDPR-related issues and topics.
Note: There’s no implied ranking, preference, or endorsement in the lists that follow. All the resources provide great information on different aspects of the GDPR.
How Threat Stack Can Help You With the GDPR
There’s a lot to the new regulation, and it’s easy to get stuck in the details. To help, Threat Stack offers an array of resources and tools:
- If you’re looking for insights into how the GDPR impacts your organization and what you can do, take a look at our website, watch our webinar on GDPR readiness, or download our GDPR Compliance Checklist.
- If you’re interested in simplifying GDPR compliance monitoring, discover how the Threat Stack Cloud Security Platform® can help.
- To obtain an insight into how you can strengthen infrastructure and evolve operational workflows to manage risk and compliance, including the GDPR, please review the Threat Stack® Cloud SecOps Maturity Framework, and feel free to complete the SecOps Maturity Assessment.
45 GDPR Resources
While Threat Stack aims to provide helpful information, other organizations have also created valuable resources covering the ins and outs of the GDPR. In the following sections, we’ve compiled a list of 45 informative resources that cover various aspects of the GDPR and how it affects companies in different locations and industries. Take some time browse these to make sure you’re not leaving your customers’ data — and your organization — at risk. We’ve grouped resources in the following categories:
- PDFs and Guides
- Slide Decks
- Videos
- Additional Threat Stack GDPR Resources
1. PDFs and Guides
For a quick overview of top security and compliance issues, including the GDPR, download a copy of Threat Stack’s 5 Security and Compliance Issues Your SaaS Company Should be Aware Of.
1. GDPR – EU General Data Protection Regulation
Knowit Secure’s Anna Borg summarizes the basics of the GDPR and highlights the key focus areas that companies should be prioritizing, followed by a valuable illustration of the “road to compliance,” including a detailed discussion of each phase along the path to GDPR compliance.
Key Topics:
- The why, what, where, and when of GDPR
- Areas you should be focusing on right now
- The main challenges of GDPR compliance
2. GDPR Awareness Guide
IAPP specializes in training professionals to manage risks to organizations and the data they hold. They’ve created a nice guide highlighting the basics of what organizations must do to remain compliant, and you’ll also find some other helpful resources on the GDPR here.
Key Topics:
- What consumers can do
- What regulators can do
- What organizations must do
3. Data Breaches and the EU GDPR
IT Governance provides risk management guidance to leading corporations around the world. This guide goes over each of the 11 chapters that make up the GDPR regulation.
Key Topics:
- An overview of the regulatory landscape
- Remedies, liabilities, and penalties
- Data breach notification rules
4. General Data Protection Regulation GDPR
Intersoft Consulting helps companies by assisting them with business management services. Based in Stuttgart, Germany, they have a vested interest in knowing as much as possible about the impacts of the GDPR. This comprehensive 99 page guide is searchable, so you can quickly find the details you need.
Key Topics:
- Rights of the data subject
- Cooperation and consistency
- Provisions related to specific processing situations
5. Guide to the General Data Protection Regulation
This international law firm services many businesses in the technology sector, so naturally, they have an interest in understanding how GDPR violations would affect their clients. This comprehensive report covers everything from core principles to individual rights, enforcement, and more.
Key Topics:
- Sensitive data and lawful processing
- Right to erasure and restriction of processing
- Data governance obligations
6. Preparing for Compliance with the General Data Protection Regulation (GDPR) A Technology Guide for Security Practitioners
The SANS Institute trains security professionals to handle cyber and information security threats to companies. They’ve created a guide that explains the purpose of the GDPR and its effects on those tasked with providing security.
Key Topics:
- Sections of the GDPR applicable to information security technology
- Steps for implementing security technology for GDPR compliance by a larger multinational organization
- The chain reaction to a data breach notification
7. What Do The New EU Data Protection Rules Mean For You?
Accountancy Europe brings together 51 different organizations representing over a million accountants from all over the world. In this report, they review how the GDPR regulations apply to those in the industry.
Key Topics:
- Role of practitioners in data protection
- Principles for processing personal data
- Data rights
8. GDPR Compliance and Its Impact on Security and Data Protection Programs
Actiance is a leader in communications compliance, analytics, and archiving. In this Osterman Research White Paper, they’ve highlighted how the GDPR impacts those managing security and data protection programs.
Key Topics:
- The regulatory imperative of the GDPR
- GDPR requirements
- Technologies required for GDPR compliance
9. The European Union’s General Data Protection Regulation
The Canadian Trade Commission operates trade offices throughout Canada. They explore what impacts the GDPR will have on Canadian interests.
Key Topics:
- What it means for Canadian firms
- What’s new with the GDPR
- Canada’s adequacy decision by the EU
10. Shopify GDPR Whitepaper
Shopify is an e-commerce platform that helps merchants sell their products on the internet. Since their clients sell to people all over the world, they want to make sure they provide clarity around what to expect from GDPR regulations.
Key Topics:
- Who the GDPR applies to
- Controller vs. processor status
- Legal basis for processing
11. General Data Protection Regulation: Are you ready?
KMPG helps companies with audits and taxes, and provides advisory services when needed. Their guide tells companies what to expect with the rollout of the new GDPR regulations.
Key Topics:
- Consent
- New responsibilities for data processors
- Data breach reporting
12. Protecting Data Under the GDPR
Cylance builds antivirus programs and other software that’s used by many companies with a global reach. Their document goes over the impact that the GDPR will have on data protection.
Key Topics:
- Summary of the GDPR
- Why it matters
- Recommended actions
13. Are Your Data Ready for GDPR Compliance?
MapR’s AI and data analytics platform is used by many top firms across different industries. They teamed with Talend, a software vendor, to explain how to use a data hub to help with data protection and to comply with GDPR regulations.
Key Topics:
- Why GDPR and data governance, and why now?
- Drawing the roadmap for the GDPR
- Setting up the GDPR foundations with a data hub
14. Navigating GDPR On Amazon Web Services
Some of the largest companies in the world use Amazon Web Services’ cloud platform to manage their data. Amazon understands the importance of following GDPR regulations as they interact with businesses from around the world.
Key Topics:
- The CISPE Code of Conduct
- Data access controls
- Strong compliance framework and security standards
15. GDPR Compliance
The EU GDPR Institute helps companies understand how to comply with GDPR regulations. Their presentation provides a roadmap and highlights different tools that are available to assist them in this effort.
Key Topics:
- Project scope and data inventory
- Accesses, consents, and requests
- Privacy Impact Assessments
16. GDPR Best Practices Implementation Guide
This presentation from Infosecurity Europe focuses on the accountability principle outlined in the GDPR. It covers the different lifecycles and how they could be implemented by organizations.
Key Topics:
- The GDPR Accountability Principle
- The accountability lifecycle
- Accountability lifecycle activities
17. Accelerate GDPR Compliance with the Microsoft Cloud
Microsoft Cloud’s GDPR presentation discusses the effects of the GDPR on users of their services. They talk about what changes to expect and how to navigate them.
Key Topics:
- Key changes to address the GDPR
- What this means for your data
- Preparing for the GDPR
18. 10 Steps to GDPR compliance: How prepared are you?
This guide provides concrete steps that companies can take to prepare for GDPR regulations. It discusses what weaknesses to look for and how to address them.
Key Topics:
- Become accountable
- Learn about legal grounds
- Communication and consent
19. GDPR: A Practical Guide to Comply
Joomla expert and Data2.eu co-founder Sigrid Gramlinger-Moser provides insight into what to expect from the newly implemented GDPR regulations.
Key Topics:
- Personal data, including special categories
- How you can comply
- The processing index
20. General Data Protection Regulation – Briefing
This presentation provides an overview of the principles of the GDPR. It also outlines the responsibility of organizations in complying with the new rules.
Key Topics:
- 6 principles of the GDPR
- Accountability
- 12 steps to take now
21. Preparing for the GDPR
Womble Bond Dickenson LLC is a transatlantic law firm that makes its services available around the world. This guide reviews the legal impacts of the GDPR regulations.
Key Topics:
- What the GDPR changes
- How it applies to US companies
- Key requirements under the GDPR
2. Slide Decks
22. GDPR Conference
The Norfolk Chamber of Commerce, one of 52 accredited Chambers by the British Chambers of Commerce, delivered this conference about the GDPR. A variety of expert speakers took part, offering legal, marketing, IT, and data protection perspectives.
Key Topics:
- GDPR and the “consent” myth
- Consent under the GDPR
- Data breach examples
23. GDPR For Dummies
IBM’s presentation is designed to inform those not familiar with the regulation or how it could potentially impact their interests.
Key Topics:
- Requirements for companies
- Appropriate safeguards
- Penalties
24. Key Changes With The GDPR
The University of Glasgow attracts students from every corner of the world. They created this simple presentation to explain what the regulation means to those attending the college.
Key Topics:
- Changes to privacy notices and consent
- Data protection by design
- Breach reporting and sanctions
25. Getting Started with GDPR Compliance
This presentation, sponsored by IDERA Software and delivered by Senior Product Manager Kim Brushaber, provides education on different data topics to IT professionals. This presentation takes those unfamiliar with the GDPR through the most important points of the new regulation.
Key Topics:
- Why we need the GDPR
- Who is responsible
- Other GDPR considerations
26. GDPR Journey: Practical steps to compliance & business outcomes
Informatica helps companies tap into the power of their data to drive intelligent disruption. The company’s Head of Solutions & Data Governance – EMEA-LA, Andrew Joss, delivers this presentation on the importance of compliance with the GDPR.
Key Topics:
- What the GDPR is NOT
- The potential for value
- Using simple questions to understand data entry points
27. An Overview of the General Data Protection Regulation (GDPR)
Microsoft put this presentation together to highlight the most important implications of the GDPR.
Key Topics:
- Risks of non-compliance
- What transparency means
- Privacy by design and by default
28. The EU General Data Protection Regulation (GDPR) Why it matters to your school
E2BN gets the help of other local organizations to provide schools with access to safe broadband services. Their presentation surveys what schools need to do to prepare for the rollout of GDPR regulations.
Key Topics:
- Preparing for compliance
- Your school’s role
- Reasons to process data
29. General Data Protection Regulation (GDPR) Compliance
Accenture helps companies develop strategies for managing company services like technology, consulting, and operations. This presentation lets clients know what changes to expect with the implementation of the new GDPR.
Key Topics:
- Records and conditions of processing
- Data subject rights
- Privacy, security, and breach management
30. GDPR for Developers
Software engineer Bozhidar Bozhanov looks at the GDPR from the perspective of a developer. He highlights different concerns to look for when implementing system upgrades for compliance.
Key Topics:
- Pros and cons of the GDPR
- Cookies
- GDPR functionalities
3. Videos
31. GDPR Compliance: What You Need to Know Before May 2018
Infosec Institute organizes boot camps and training seminars to educate technology professionals on various IT and security topics. Their presentation goes over what companies can expect with the rollout of the new GDPR regulations.
Key Topics:
- Data types regulated under the GDPR
- Steps to becoming GDPR compliant
- Consequences of non-compliance
32. GDPR: What All Authors Need to Know
This presentation looks at how the GDPR impacts authors and writers working on the web. It speaks about how to manage the collection of information for mailing lists and other items they sell.
Key Topics:
- Changes to mailing lists for compliance
- Landing page wording
- 4 GDPR best practices
33. What You Need To Know About GDPR
This video by SmartSimple Software goes over key principles of the GDPR regulations. They emphasize the impact of the regulations on firms based in Europe and those working remotely with European clients.
Key Topics:
- Key principles and changes
- How will your organization be affected?
- Tips and steps to ensure compliance
34. GDPR Compliance: “Explain Like I’m Five” with Data Privacy Expert
Jodi Daniels, data privacy expert and former SVP of Enterprise Privacy Compliance at Bank of America, breaks down the important points of the GDPR in this webinar for BetterCloud. Her explanations clarify subjects for those not familiar with the policies.
Key Topics:
- Actionable steps to achieve compliance
- Data types and minimum requirements
- Costs and consequences of non-compliance
35. General Data Protection Regulation
Rackspace hosts and provides different cloud services to business clients. They, along with customer and special guest People HR, provide you with insight into how they help manage the GDPR for cloud customers.
Key Topics:
- Security and compliance considerations
- Preparation
- Project timeline: protect, detect, secure
36. The ABC’s Of The EU GDPR: Here’s what you need to know
This webinar goes over what businesses large and small need to be aware of when it comes to GDPR regulations. You’ll hear details about the consequences of failing to do enough to fall in line with the new standards.
Key Topics:
- The data security landscape
- Prevention
- New EU data rules
37. GDPR Without The Hype
@withoutfire
In this presentation delivered via an RSA Conference virtual session, John Elliott, easyJet’s head of payment security, takes the lead in walking viewers through what to expect from the GDPR. He explains why it’s important to do what’s needed to make sure you’re protecting data in a way that conforms to the new policies.
Key Topics:
- What does compliance look like?
- Regulatory zones of compliance
- Core data protection principles
38. Understanding & Working With the GDPR: Engaging Your European Audience
Marketo provides automation software to marketers help them manage different campaigns. They provide insight into how their company helps customers prepare for the new GDPR regulations.
Key Topics:
- An overview of the GDPR
- The GDPR and the marketer
- Implications for marketing
39. EU General Data Protection Regulation (GDPR) Need to Knows
Nuix, a technology company based in Australia, provides software designed to manipulate data based on the needs of business customers. This panel discussion reviews the importance of understanding the impacts of the GDPR.
Key Topics:
- Impacts for business, law enforcement, and regulators
- Processes and procedures to ensure compliance
- The GDPR’s impact on innovation and the use of big data
40. GDPR Compliance with Google Analytics – Do You Need Cookie Consent?
This video helps Google Analytics users understand how to bring their accounts into compliance with GDPR standards. They focus on handling the capture of information with cookies.
Key Topics:
- Impact of retaining user data on compliance
- How long you can retain user data
- Using cookie consent notifications
41. GDPR Compliance For WordPress – A Website Developers Goldmine
WPCrafter provides advice and tutorials to non-technical WordPress developers. He explains the opportunity available to developers to bring websites up to GDPR standards by gaining a deep understanding of the underlying principles.
Key Topics:
- The GDPR for websites
- Disclosure forms
- Transparency
42. How to Build a GDPR Implementation Plan
This video guides business owners through the process of building an implementation plan to address handling GDPR regulations. It’s designed to allow for a consistent approach to addressing weak points throughout the organization.
Key Topics:
- The current GDPR landscape
- Designing a GDPR implementation plan: common pitfalls
- Methods for building and communicating an implementation plan
43. GDPR – A practical guide for developers and architects
This video provides insight from two developers looking to help others find out how the new law impacts the work they do for clients. They cover general development and event-sourced architecture.
Key Topics:
- When to process personal data
- Asking for consent
- Limiting data retention
44. Enabling Rights Of Your Data Subjects As Part Of GDPR Implementation
Several top technology experts and solutions architects take the time to guide those tasked with data protection through what they need to understand. They explain what can be done to keep the rights of their users protected in ways that meet GDPR guidelines.
Key Topics:
- Industry need for the GDPR
- Key changes to address the GDPR
- 5 core GDPR rules
45. IBM’s Holistic Implementation Plan for GDPR Readiness
Technology firm and IBM partner pr3systems provides some insight into IBM’s approach to preparing for the GDPR. They went with an end-to-end holistic method to make sure they met the stringent new standards.
Key Topics:
- Who should care about GDPR?
- Biggest challenges
- 5 key areas to address
Additional Threat Stack GDPR Resources
For good measure, we’re also throwing in the following Threat Stack blog posts that provide insights into specific aspects of the GDPR:
- Group Fines Under the GDPR
- GDPR: What Compliance Says vs. What DevOps Hears
Are You Ready for GDPR? Here’s a Checklist
GDPR: What is the Right to Erasure?
T-72 Hours to Report a Breach – Are You GDPR Ready?
GDPR vs. Existing Frameworks: Overlaps, Differences, and Filling the Gaps
5 Things Your SaaS Company Should Know About GDPR
And finally, feel free to download these ebooks prepared by Schellman & Company for information and guidance on GDPR:
*** This is a Security Bloggers Network syndicated blog from Blog – Threat Stack authored by Hank Schless. Read the original post at: https://www.threatstack.com/blog/45-useful-and-informative-gdpr-presentations-resources
