Transitioning GDPR from a Compliance Checklist to “Business as Usual”
summary
Argues GDPR becomes routine by turning tasks into a repeatable 10-step lifecycle that maps data, cuts duplicate copies (he cites reducing “10 locations” of the same record), and shrinks attack surface; recommends a centralized vendor platform to replace “Excel hell,” an API-powered DSR automation that triages requests into CRMs and returns encrypted portal responses, cookie scanning for sites with “five to ten” content providers, incident timers tied to notification deadlines, and measurable KPIs.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 0:42Impact of GDPR
- 3:18What is the solution
- 4:32Maturity
- 6:43Identification Anonymization
- 7:09Data Protection Impact Assessments
- 8:11Vendor Risk Management
- 9:08Better Solutions
- 9:51Data Subject Request Process
- 10:29Data Subject Request Technology
- 13:01Cookie Consent
- 15:40Incident and Breach Response
- 16:53Legal Basis
- 17:38Education
- 19:29Data Subject Rights
- 20:22Privacy as a Standard
- 20:42Final Tips
- 21:30OneTrust
- 22:09DataGuidance
related talks
47mKeynote: Are You Ready for GDPR?
44mEmbedding GDPR into the SDLC
39mdev.privacy: GDPR in a nutshell
54mEuropean Vacation: Leveraging GDPR for Security
46mGDPR Compliance Tools
01h 14mThe GDPR is easy: (Un)tangling SME compliance hurdles.
48mGDPR Design for Websites, Apps and (Ro)Bots
21mBuilding Privacy Aware Infrastructure