The General Data Protection Regulation: What U.S.-Based Companies Need to Know

摘要

While much of the discussion surrounding the GDPR focuses on the obstacles and burdens, a positive impact is that companies are being forced to take a hard look at their data, network infrastructures, processors, and data retention. They are encouraged to ask questions such as: What data do we have in our system? Is it necessary for our operations? How did we get that data? What are we doing with it? Who else has access to it? These conversations are illuminating and sometimes shocking to upper-level management. Forcing companies to perform an assessment, or at least start a conversation related to data, can lead to the development of improved business efficiencies, lower data costs, and decreased risks and liabilities.