How IBM Supports Clients Around GDPR and Cybersecurity Legislation

Current European Union (EU) Data Protection rules date back to 1995. The EU was keen to establish a new set of rules reflecting the current reality of data usage and in response to calls that existing laws were out of date. In January 2012, the European Commission made a proposal for a single harmonized General Data Protection Regulation (GDPR) across the EU.

After four years of intense negotiations, a political agreement on the GDPR was finally reached in December 2015. This was formally adopted into European law in May 2016 and companies now have two years to implement and conform to the new regulation, which will enter into force in 2018.

The evolving regulatory environment on cybersecurity and data protection offers both possibilities and challenges for IBM and its clients. The challenges range from governance to securing application and infrastructure.

IBM has extensive experience helping clients navigate regulatory environments in Europe – and around the world. We have done this successfully through consulting services and solutions and through our delivery of cloud and cognitive solutions. This paper reflects IBM’s general view of Europe’s new regulatory landscape. It is not, however, intended to be exhaustive and does not describe every procedure and technical detail that could be required.

The key to establishing preparedness in this new era lies in choosing the right partners for your organization, and being able to deploy appropriate security and data protection controls and procedures in a way that can be rapidly and readily demonstrated. IBM understands this is not just a technical challenge, but a challenge of governance and compliance, applications and infrastructure and assurance.

The paper explores:

The implications of the new GDPR
The new rights of data subjects
The new responsibilities for data controllers and processors
The transfer of personal data
How IBM can help
The new Network and Information Security (NIS) Directive

Watch the on-demand webinar: New Data Protection Law GDPR: Reality Bites!

Nick Coleman

Global Head Cyber Security Intelligence, IBM

Defense in depth: Layering your security coverage

2 min read - The more valuable a possession, the more steps you take to protect it. A home, for example, is protected by the lock systems on doors and windows, but the valuable or sensitive items that a criminal might steal are stored with even more security — in a locked filing cabinet or a safe. This provides layers of protection for the things you really don’t want a thief to get their hands on. You tailor each item’s protection accordingly, depending on…

What is data security posture management?

3 min read - Do you know where all your organization’s data resides across your hybrid cloud environment? Is it appropriately protected? How sure are you? 30%? 50%? It may not be enough. The Cost of a Data Breach Report 2023 revealed that 82% of breaches involved data in the cloud, and 39% of breached data was stored across multiple types of environments. If you have any doubt, your enterprise should consider acquiring a data security posture management (DSPM) solution. With the global average…

Cost of a data breach: The evolving role of law enforcement

4 min read - If someone broke into your company’s office to steal your valuable assets, your first step would be to contact law enforcement. But would your reaction be the same if someone broke into your company’s network and accessed your most valuable assets through a data breach? A decade ago, when smartphones were still relatively new and most people were still coming to understand the value of data both corporate-wide and personally, there was little incentive to report cyber crime. It was…

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

More from Data Protection

Defense in depth: Layering your security coverage

What is data security posture management?

Cost of a data breach: The evolving role of law enforcement

Topic updates