Intelligent CIO Middle East Issue 31 | Page 23

LATEST INTELLIGENCE processed, sits within the business functions. The first barrier reported by (ISC) 2 members working on compliance projects, was an inability to get projects off the ground due to a lack of engagement from business stakeholders, a concern which has persisted throughout 2017. Wherever your organisation is on its route to compliance, this document will help you to begin to understand GDPR and your company’s compliance obligations. What is GDPR? The European Parliament adopted GDPR in April 2016, replacing a data protection directive approved in 1995. The new law carries strict provisions that require businesses to protect the personal data and privacy of EU citizens for all data transactions. The GDPR also regulates the export of personal data outside the EU. The provisions are consistent across all 28 EU member states, meaning that companies must comply with just one standard in the EU. However, that standard is quite high and will require companies around the world to make a large investment to meet it and maintain it. A recent survey by Spiceworks suggests that only 9% of IT/ ICT professionals in the United States have an understanding of what GDPR entails and how it affects their businesses. n Download whitepapers free from www.intelligentcio.com/me/whitepapers/ www.intelligentcio.com INTELLIGENTCIO 23