turning a data headache into an information …...veritas-gdpr market research our newest research...

Turning a Data Headache into an Information Opportunity

Simon Holmyard

We Assume All Data is Valuable. Forever.

© 2017 Veritas Technologies2

Data is the

new oil.”Shivon Zilis

Partner, Bloomberg Beta

39%

Data Growth

averagegrowthper year

Storage Velocity

9% fasterthan we are creating individual files

2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017

If Data is So Valuable, Why Don’t We Treat it That Way?


33%

52%Dark Data

ROT

15%Clean

We don’t have a cluewhat most of it is.

The Global Databerg Report, 2016

Much of it goes untouchedand unleveraged.

Data Genomics Index, 2016

41%

less than3 years

old

at least3 years

old

201520142013201220112010200920082007

more than7 yearsold

But, we know a good chunkshould be deleted.

The Data Hoarding Report, 2016

On average, ITDMs keep

54%of the files they create

42% 28% 16%Unencrypted

companysecrets

Embarrassing orincriminating employee

correspondence

Sexuallyexplicit

material

ITDMs admit storing unfavorable itemson personal or company devices

The Government- Their Digital Demands

Copyright © 2017 Veritas Technologies LLC4

Supporting the Data Economy- Data Infrastructure - Data Held by Business- Sharing Data Across Countries- Improving Data Skills

Building Public Trust- Supporting people’s data rights and responsibilities- Ethical Frameworks- AI

Using Government Data Effectively - Managing Government data- Opening up Government Data

5 Copyright © 2017 Veritas Technologies LLC

What information do we have?

What it is worth?What information do we

keep? .

Problem 1

Where is our Sensitive, regulated and valuable

information?

Who can access it?

Problem 2 Problem 3

Finding information takes too long and

costs too much

Results aren’t accurate

The Negative impacts of not understanding your data…

COMPLICATED…by what happens to data – its everywhere!


USA – FCRA, ECOA,HIPAA

ARGENTINA – PDPL

EU - GDPR

SOUTH AFRICA - POPI AUSTRALIA –FEDERAL

PRIVACY ACT

SOUTH KOREA – PIPA

HONG KONG – PERSONAL DATA ORDINANCE

JAPAN - APPI

MALAYSIA - PDPA

SINGAPORE - PDPA

CANADA - PIPEDA

TURKEY - KVKK

The Need to Modernize Data Governance

ISRAEL - POPL

Veritas- GDPR Market Research

Our newest research reveals insights from 3,000 consumers across UK, France and Germany, and highlights that businesses across a variety of

industries can expect an onslaught of personal data requests from EU residents following the deadline for GDPR compliance


Which rights do you plan to exercise?

GDPR: regulation about PERSONAL DATAThe General Data Protection Regulation

• An EU Data Protection law with global reach – any (public or private sector) organisations OR service provider (controller & processor) outside the EU offering goods/services to those in the EU (even free), or monitoring their behavior comes under the GDPR

• GDPR has penalties that raise it to the same level as anti-corruption & bribery legislation. No longer an option of prosecution vs compliance

• GDPR is an Information Governance law. It protects the fundamental rights and freedoms of individuals and their privacy by mandating how personal data must be processed.

• Should be seen as a positive – getting ready for GDPR (and other privacy laws) is the Information Governance project all organisations need to go through

Copyright © 2017 Veritas Technologies LLC

• Data mapping/Data Discovery on legacy systems and future ingest of PII

• Consent and data minimisation (on legacy and data collected going forwards) & discipline on retention management

• Breach notification, Privacy by Design & Privacy Impact Assessments

• Data subjects rights to view, correct, port and delete their data (RTBF)

• Internal behavior and culture change on how PII is collected, stored & used

The GDPR in a nutshell What the GDPR drives businesses and organizations to focus on

13

Collection, use, disclosure and care of personal data

How Do You…


Know what data you have?

Move the right data?

Migrate to/from/between?

Avoid cloud lock in?

Stay compliant?

Avoid cloud outages?

Lift & shift w/ performance?

Protect data everywhere?


Veritas is PROVIDING a roadmap to COMPLIANCE

PersonalData

Veritas GDPRFRAMEWORK


Uncover Personal Data and make it visible

Article 30

Data InsightInformation Map

Make Personal Data searchable

Articles 15, 16, 17, 18, 20

EDiscovery Platform

Minimize and place controls around Personal DataArticles 5, 17, 32

Enterprise VaultEnterprise Vault.cloudData Insight

Protect Personal Data from loss, damage or breach

Articles 5, 25, 32, 33, 34, 35

NetBackupBackup ExecData InsightInfoScaleVRPAccess

Ensure continual adherence to GDPR standards

Articles 5, 15, 16, 17, 18, 20, 24, 35, 42, 44, 45

Data InsightEnterprise VaultEnterprise Vault.cloud

PersonalData

Veritas Solution Coverage for GDPR


Locate, Search, Minimise

Provide Visibility & Take Mitigating Action

Search Monitor

Respond to SAR Respond to Breach

Protect

Backup and Keep Available

GDPR Activity

4 STEPS

Key:

Unstructured Data Disposition: Mapping, Classification and Tagging of

Personally Identifiable Information

Structured Data Disposition:Personally Identifiable Information

Retention and Retirement policy

Infrastructure Mapping: Mapping, Risk analysis and Business Continuity Assessment

Application Mapping:Documenting situation and risks, gap analysis

Structured Data Mapping:Documenting data, purpose and policy

SAR:Search, Reporting,

Process Management

Process Mapping:Documenting situation and risks

Data Access Monitoring:

Audit, Reporting, Response Process

Management

Data Protection & Availability: Design

and Deployment

BC & BU Strategy

Tech Consulting - Veritas Traditional

Business Consulting – Veritas or Partners

Process

Data

Application

Infrastructure

1 2 3 4

4 Steps to Compliance

19

1

2

3

4

Create and apply retention policies; the same for Structured and Unstructured Personal Data

FIND AND ORGANISE YOUR PERSONAL DATALOCATE & MINIMISE

SEARCH

MONITOR

PROTECT

Find personal data quickly enough to meet the time limits for data subject requests, such as the right to be forgotten (If you’ve completed Step 1 you’ll have much less data to search)

FIND DATA TO BE FORGOTTEN – RESPOND TO SUBJECT ACCESS REQUESTS

Identify data breach within 72 hours and provide an audit trail of usage and movement of data

BE BREACH READY

Protect personal data from loss, damage, destruction and unlawful or unauthorized processing (Back-up & Recovery, Archiving and Resiliency)

PROTECT WHAT YOU KEEP

Next STEPS


1

2

3

GDPR Show and Tell

How Veritas can help you solve the challenges

How our products map to the GDPR framework

GDPR Education Workshop

The Veritas view of the regulation

Critical first steps to GDPR compliance

GDPR Assessment

Veritas assessment to understand maturity

Recommendations and Plan of Action

Help define and scope project

Thank you!

Copyright © 2017 Veritas Technologies. All rights reserved. Veritas and the Veritas Logo are trademarks or registered trademarks of Veritas Technologies or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.

Copyright © 2017 Veritas Technologies21

turning a data headache into an information …...veritas-gdpr market research our newest research...

Documents