Intelligent CIO Africa Issue 13 | Page 35

////////////////////////// “ Nigel Tozer, Solutions Marketing Director EMEA, Commvault E nterprises around the world are preparing to comply with GDPR, one of the toughest data privacy regulations in the world, when it takes effect on May 25 2018. Businesses need to be aware that GDPR applies to companies worldwide, no matter where they are based, if they handle data concerning European citizens. The definition of data is broad and applies to any that can be used to identify individuals, meaning hardly any personal data won’t be covered by GDPR. Those organisations collecting data or employing third parties to do this on their behalf will need to make sure they can demonstrate compliance regarding how it will be used and if they use it for an unsuitable purpose they will be made to stop. GDPR also requires public authorities that are processing personal data to appoint a data protection officer to monitor how it is being used and many businesses will need to do this too. The regulations will require compulsory PIAs (Privacy Impact Assessments) to take place where there is a high risk of a data breach and there is also a requirement to report data breaches to the local data protection authority within 72 hours of it being found. All software and systems will need to deal with stringent audit requirements which mean that they will need to have the ability to amend and permanently delete data if requested by the data subject. www.intelligentcio.com INSIGHTS FROM DATA CAN HELP TO DRIVE OUT INEFFICIENCY AND IMPROVE CUSTOMER EXPERIENCE. Finally, data cannot be used for any other purpose other than the one for which explicit (not implied) consent was obtained. Some technology companies, such as Commvault, are helping businesses comply with GDPR regulations. We spoke to Nigel Tozer, Solutions Marketing Director EMEA for Commvault, about the best approaches to take when dealing with data and how to tackle the requirements of GDPR. How can enterprises obtain better insight into their data? It’s really important for your businesses to profile its data, only then can you understand your data well enough to secure, control and effectively use it to generate value. In addition to uncontrolled data-growth in datacentres, enterprises also typically use a mix of SaaS, third party services and multiple clouds. On top of this you can add data on laptops, which can also be considerable depending on your type of business. This growth and fragmentation makes it even harder to get a handle on data, and for many enterprises, it seems just too difficult to try. While applications are usually well managed, up to 80% of data in a typical enterprise is unstructured and, according to AIIM, this is where organisations accept that the real problem lies. Profiling unstructured data by content can provide insight into: • Unsecured personal or sensitive data, clearly important with rise in cyber crime and global privacy regulations INTELLIGENTCIO 35