Intelligent Technologies for EU GDPR

Intelligent Technologies for EU GDPR

With the long anticipated General Data Protection Regulations (GDPR) of the European Union coming into effect in May, companies across the globe are scrambling to insure their data management systems are ready for the new responsibility.

GDPR presents a tall order for firms that want to do business in Europe.

GDPR lays down notification rules, requiring a company to report data breaches within 72 hours of the organization becoming aware of the incident.  The regulations require regular submissions of compliance statements to the relevant authorities. This means that security officers will be compelled to go over many aspects of company IT with a fine tooth comb to insure that the new rules are being implemented.

Perhaps the most demanding element of the GDPR is the demands placed on companies for securing their data and standards of Data Loss Prevention (DLP).   GDPR for instance requires sensitive identification and personal details to be be put through substantial encryption such as anonymization, the processes of turning data into a form which does not identify individuals, or pseudonymization, where fields of personal data are replaced by artificial identifiers, or pseudonyms.   For businesses, this will translate into the need to deploy Data Loss Prevention solutions that can track, report and get valuable insights about what personal data is being transferred where and by whom.

In the current period, even small businesses are often operating with massive volumes of data flowing through, and being stored in, the network regularly. This presents a significant challenge to companies of finding a solution capable of addressing the unique nature of a wide variety of data types.   A one-size-fits-all traditional DLP solution that makes no distinctions between data, can severely hinder company operations by affecting team collaboration, interfacing security protocols with existing systems, as well as requiring additional operations training.    Additionally, these common DLP programs rely on pre-set algorithms and regular expression patterns to determine which data is deemed “sensitive” leading to serious issues in identification accuracy.

 Smart DLPtm

Applying the new methods of Smart DLPtm is the solution that circumvents all of these challenges.  GTB’s Data Loss solution applies smart algorithms to data classification. The content aware program categorizes outbound and / or inbound data transmissions from a company device, all in real time.   The program “learns” the data flow of a system in order to automate classification.    Data is accurately flagged based on an increasing list of meaningful markers, which allows the program to hone in on relevant data.   This comes with the additional benefit of virtually eliminating false positive data loss alerts over time. All of these factors made sure that company IT never becomes overburdened with data protection tasks and maintenance.

By implementing GTB, a company can achieve the high level of DLP according to GDPR standards, while maintaining both seamless workflows and efficiency of company operations.

Visibility: Accurately, discover sensitive data; detect and address broken business process, or insider threats including sensitive data breach attempts.

Protection: Automate data protection, breach prevention and incident response both on and off the network; for example, find and quarantine sensitive data within files exposed on user workstations, FileShares and cloud storage.

Notification: Alert and educate users on violations to raise awareness and educate the end user about cybersecurity and corporate policies.

Education: Start target cyber-security training; e.g., identify end-users violating policies and train them.

  • Employees and organizations have knowledge and control of the information leaving the organization, where it is being sent, and where it is being preserved.
  • Ability to allow user classification to give them influence in how the data they produce is controlled, which increases protection and end-user adoption.
  • Control your data across your entire domain in one Central Management Dashboard with Universal policies.
  • Many levels of control together with the ability to warn end-users of possible non-compliant – risky activities, protecting from malicious insiders and human error.
  • Full data discovery collection detects sensitive data anywhere it is stored, and provides strong classification, watermarking, and other controls.
  • Delivers full technical controls on who can copy what data, to what devices, what can be printed, and/or watermarked.
  • Integrate with GRC workflows.
  • Reduce the risk of fines and non-compliance.
  • Protect intellectual property and corporate assets.
  • Ensure compliance within industry, regulatory, and corporate policy.
  • Ability to enforce boundaries and control what types of sensitive information can flow where.
  • Control data flow to third parties and between business units.