IAPP CIPT – How Technology can help in achieving GDPR compliance

1. What you will going to see in this section Hi guys. In this lesson we’ll discuss what you’re going to see in this whole section number eight. And after we manage to fill in and to see all the documents you need to create and use in order to become GDPR compliance, either your… Read More »

IAPP CIPT – GDPR Implementation – short intro guide!

1. GDPR short overview Hello, guys. In this lesson, we’ll start discussing about a short overview of GDPR. The General Data Protection Regulation was approved by the European Commission on 27 of April 2016 and becomes law on 25 of May 2018. It replaces the previous European Commission legislation which dealt with data protection, which… Read More »

IAPP CIPT – GDPR for Cloud Service Providers (CSPs) Part 5

17. Advices for CSPs and Software providers Hi, guys. Here are some advices for cloud service providers. Cloud service providers need to consider their positions urgently in light of the GDPR. They will have to update their standard contract terms, let’s say for compliance with GDPR requirements, bearing in mind that their role as a… Read More »

IAPP CIPT – GDPR for Cloud Service Providers (CSPs) Part 4

14. Software and CSPs to consider – part 2 Hi guys. In this lesson, we’ll discuss about three other cloud vendors Comb, Drova and Google Cloud. Let’s start with Combo. Combo uses its Arbit and data protection tools to provide GDPR compliance, backup, data management, storage and security capabilities. Combo delivers a unified platform for… Read More »

IAPP CIPT – GDPR for Cloud Service Providers (CSPs) Part 3

9. Codes of conduct, certifications and compliance Hi, guys. So what are important steps to compliance? The GDPR clearly sets out the rights and obligations of sub processors and requires them to meet strong contractual requirements. There’s something that’s been missing from this conversation, though, and that’s how to handle cloud apps. You know, like… Read More »

IAPP CIPT – GDPR for Cloud Service Providers (CSPs) Part 2

5. Technical and Organisational measures Hi, guys. If CFP processors do just one thing, they should review the bombshells contained in Article 26. Under this article, the processor shall not enlist another processor without the prior specific or general written consent of the controller. In effect, this means transitioning to a regime of subcontracting only… Read More »

IAPP CIPT – GDPR for Cloud Service Providers (CSPs)

1. Cloud and GDPR Concerns Hi guys. We’ll discuss about cloud and GDPR concerts. As the GDPR is a lot about consent or other legal grounds for lawful processing, about data subject rights, privacy and putting back the control of personal data in the hands of people in general. It clearly requires a risk perspective… Read More »

IAPP CIPT – GDPR and Payment Services Directive (PSD2) Part 4

12. Authentication Step Hi guys. In this lesson we’ll discuss about the authentication step. The research has highlighted some suggestions to make this step more customer friendly. The presence of the ASPs branding and logo at this step is critical to engineering customer confidence and trust in the entire process. The more distinctive the authentication… Read More »

IAPP CIPT – GDPR and Payment Services Directive (PSD2) Part 3

9. Other challenges – GDPR and PSD2 Hi guys. In this lesson, we’ll discuss again about other challenges between PSD Two and GDPR. Seemingly unconnected, these two regulatory initiatives do in fact share two common aims putting customers in control of their own data and keeping that data safe. Both GDPR and PSD Two are… Read More »

IAPP CIPT – GDPR and Payment Services Directive (PSD2) Part 2

5. New types of service providers – TPPs Hi, guys. In this lesson, we’ll discuss about rules for new types of payment service providers. What are payment initiation services? The PSD two opens the European Union payment market for companies offering consumer or business oriented payment services based on the access to the information from… Read More »