How can SAP users prepare for GDPR?

The General Data Protection Regulation (GDPR) is set to come into force on the 25th of May, 2018. The regulation will completely overhaul the rules for how businesses handle the personal data for any organisation operating in the EU, or any organisation that handles the data of EU citizens. GDPR is designed to protect the privacy of users, and ensure customer data is kept secure. Failure to comply with GDPR has serious ramifications – with potential fines of up to 4% of a company’s worldwide turnover.

This would be a serious hit for any business, so in the run up to GDPR, organisations must ensure they are prepared. However, according to a recent report, 98% of cloud apps don’t even come close to being GDPR ready. Further, as SAP systems are often business-critical, and can hold a large amount of personal data, it’s essential that businesses using SAP act now to avoid a costly wake up call. For SAP users, keeping GDPR in mind at every stage of app development and in day-to-day use, will be vital. SAP has already warned that companies will have to carry out Data Protection Impact Assessments (DPIAs) as a part of their overall risk management strategy once GDPR is applicable.

As GDPR draws closer, you can find out more on the ICO website, which will be updated each month until the GDPR comes through. Additionally, SAP GRC users can sign up to a Customer Engagement Initiative, which gives SAP customers access to a collaborative project designed to help users improve their privacy management programs with SAP GRC.

There is also plenty of resources from the UKISUG that can support your organisation’s journey to becoming GDPR compliant, and on the 16th of February, Jeroen Trestegge, Partner Senior Consultant at Privacy Management Partners, will be hosting a webinar on GDPR for UKISUG members. The webinar will cover the key policies behind GDPR, the compliance risks associated with cloud environments, and provide tips on how to control those risks, and avoid fines and reputation damage.

To register for the webinar and find out more about future events, please click here