The European Commission will start enforcing the General Data Protection Regulation (GDPR), also known as the Algemene Verordening Gegevensbescherming (AVG) in Dutch, starting on 25 May 2018. All organisations in the European Union that process personal data must comply with the GDPR. This requires adjustments to systems and processes. Are you able to implement these adjustments in such a manner that they will reduce the costs of your compliance and increases the customer experience?
Privacy by Design as a key driver for effective, efficient, and high-quality new business initiatives. In this rapidly changing digital landscape, it is essential to shorten the time to market for your new business initiatives to ensure you keep a competitive advantage. At the same time, it is key to keep and improve the trust relationship with your customers. To do this successfully, a sustainable business strategy that aligns with todays and tomorrow’s challenges and customer expectations is needed. Key to that strategy is embedding cybersecurity and privacy within your organisation to ensure your customer’s personal data is protected. This will create a unique selling point for your new product, service or other business initiative and positively influence your position in the market. Implementing Privacy by Design is the answer to effectively and efficiently benefit from all these advantages.
Starting on the 25th of May 2018, you must make clear how you process personal data and for what purposes. You must also have a procedure for the deletion of customer data upon request. Privacy must be guaranteed to the best of your ability in all systems. GDPR demands safe, properly communicating IT systems and clear procedures.
This is difficult for a lot of organisations, for example, because they have little insight into the different data systems, enter data manually, and are not in the possession of a structured data reporting system. This makes the GDPR a complex and difficult compliance issue.
Complying with the GDPR is more than just compliance: it is an incentive to gain insight into your customers and what data you possess. Our unique GDPR technology package brings all relevant data from your systems together in an integrated platform:
The GDPR technology package incorporates four areas of expertise: Privacy Governance & Management, Legal, Data Discovery & Analysis and Identity & Access Management.
PwC assists organisations with the required technical, organisational and legal capabilities. We offer a default approach with proven methods to assess what measures are needed and what benefits this may offer.