On May 25, 2018, the European Union (EU) has changed the way organisations complete business by implementing a new privacy law called the General Data Protection Regulation (GDPR). With much advancement in technology and how more data is collected than ever before, the GDPR establishes rules for organisations, government and other entities that handle personal information and to ensure the privacy rights are granted to individuals.

The GDPR redefined the concept of “personal information” into very broad meaning as any information that is identifiable individual (“Data Subject”). The GDPR regulates the “processing” and “controlling” of data which includes the collection, storage, transfer, or use. The regulation applies to all companies in the EU member states, and all the companies offering goods and services to EU Data Subjects; it applies no matter where you are located.

Here at Cloudworkz Ltd, we have expertise in privacy and protection of data. We are dedicated and committed to the GDPR compliance across our services prior to the Regulation’s effective date.

Link to GDPR

https://ec.europa.eu/info/law/law-topic/data-protection_en

Link to resources of GDPR

https://ico.org.uk/media/1624219/preparing-for-the-gdpr-12-steps.pdf

Some of Key Changes in GDPR

• Personal Data
  • Expanded the definition of personal data
  • Online identifiers, such as IP addresses, are considered personal data.
• Individual Rights
  • Access, correct, erase, restrict, and export personal data
  • Object to processing of their personal data
• Consent
  • Consent is redefined to legitimise certain processing activities
  • A previously given consent can be revoked
• Security
  • A requirement of Controllers and Processors to implement appropriate measures to ensure a level security
  • At Cloudworkz, the Platform and each of our Solutions is built with multiple layers of security, backups, and disaster recovery.
  • We have a number of security certifications
• Transparent Policies
  • Companies are required to provide the clear intention of use of personal data
  • Policies regarding data retention and deletion
  • The requirement to provide information to data subjects even if personal data has not been directly obtained
• Controls and Notification
  • Protect personal data using appropriates security
  • Notify authorities of personal data breaches
  • Obtain appropriate consents for processing data
  • Keep records detailing data processing
• IT and training
  • Train privacy personnel and employees
  • Audit and update data policies
  • Employ a Data Protection Officer, if applicable
  • Create and manage compliant vendor contracts
• Profiling
  • A new concept of profiling
  • Restriction on the automated processing of personal data to evaluate personal aspects such as work performance, economic situation, health, behaviour, interests, attitudes or location.

At Cloudworkz Ltd, we welcome the GDPR as an opportunity to strengthen our commitment to privacy and data security. We are working diligently to ensure that our products, services and contracts comply with the GDPR to help our users’ and their customers’ compliance with the GDPR.