The European General Data Protection Regulation (GDPR) was adopted by the European Parliament in May 2016. The implementation period has been two years, which means that this regulation will enter into force at the end of May 2018. It regulates processing of personal data by private companies and public bodies uniformly throughout the European Union and applies directly in all member states without having to be transposed into national law. To learn more visit our website: https://www.boc-group.com/eudsgvo You can also book a free GDPR demo online at https://www.boc-group.com/contact

1. EU GDPR
An approach to compliance
Key Terms
Important Actors
Our Approach
Tough Penalties
All information relating to an
identified or identifiable
natural person.
Personal data
Fines up to
of annual global
revenue4% or
Data of natural persons about
their racial and ethnic origin,
political opinion, etc.
Sensitive data
Processors: Process data according to the
instructions of the controller.
Controllers: Decide on the type of data
processing.
Data subjects: Have an interest
in the protection of their personal
or sensitive data.
6. Identify and assign risks and
technical and organisational
security measures
Enter and assign relevant risks
Perform initial risk assessment
(probability and extent of damage)
Document the necessary organi-
sational security measures per risk
3. Catalogue your
applications
Start from the current application
landscape
Record or update information on
all data processing application
5. Identify and assign
recipients
Catalogue relevant data recipients
as org. units or external actors
Assign them to the processing
activities as recipients
4. Identify and document the
processing activities
Record processing activities
Link them to the respective business
objects and entities that they process
Assign data subjects, processing
applications and processes to the
processing activities
2. Identify data subjects
Identify types of data subjects for
each business object or entity
Structure them into data
categories described as roles
1. Identify categories
of data types
Categorize and document relevant
data (personal and sensitive)
Capture business objects or
entities (data model)
To learn more: https://www.boc-group.com/eudsgvo
BOC Group @BOC_Group
Book a free GDPR demo online:
www.boc-group.com/contact
20
MILLION,
WHICHEVER IS GREATER