General Data Protection Regulation (GDPR)
Discover, protect and securely erase personal data – meeting GDPR's safeguards and Right to Erasure obligations.
Meet GDPR’s Data Protection Requirements with Jetico’s Solutions
The General Data Protection Regulation (GDPR), introduced in 2016 and effective since May 25, 2018, applies to any organization handling the data of European citizens – regardless of where the organization is based. Non-compliance carries fines of up to four percent of global annual turnover.
Before personal data can be protected or erased, it must first be located. A solid GDPR strategy starts with data discovery, then applies encryption to data that must be retained and secure wiping when retention ends or a Right to Erasure request is received.
GDPR Encryption
- GDPR strongly recommends data encryption as part of the “appropriate technical and organizational measures” for protecting personal data in Article 32.
- Encryption can help reduce compliance burdens under GDPR. Article 34 states that if data is encrypted and therefore rendered unintelligible, organizations are exempt from notifying affected individuals in the event of a data breach.
- To help your organization with GDPR compliance, we offer BestCrypt Container Encryption to safeguard files and folders and BestCrypt Volume Encryption to protect entire hard drives.
GDPR Access Control
- Controlling who and what can reach personal data is a core security measure under Article 32, which calls for appropriate technical measures to protect the confidentiality of personal data.
- It also supports GDPR’s integrity and confidentiality principle (Article 5(1)(f)), which requires protecting personal data against unauthorized access.
- To help your organization with GDPR, we offer BestCrypt Data Shelter for policy-based access control across endpoints.
GDPR Data Wiping
- Data wiping is a key aspect of the “Right to Erasure” (or “Right to Be Forgotten“) under GDPR.
- Article 17 gives individuals the right to erasure – the right to have their personal data deleted “without undue delay” when certain conditions are met. Meeting those requests in practice is where many organizations struggle: a recent EDPB report on the right to erasure found common gaps in how erasure requests are handled.
- To help your organization with GDPR, we offer BCWipe to wipe selected files and folders and BCWipe Total WipeOut to erase entire hard drives.
Know Where Personal Data Lives Before You Protect or Erase It
Compliant with Leading Data Erasure & Security Standards
With Jetico, You Can
Jetico helps you discover where personal data resides, protect it while it’s needed and securely erase it in response to GDPR’s Right to Erasure – supporting every stage of the data lifecycle GDPR expects you to control.
Need Help with GDPR Compliance?
Our data protection specialists are here for you.
About GDPR Compliance
The General Data Protection Regulation (GDPR) is a wide-reaching privacy law designed to protect personal data and enhance individual rights within the European Union. The main goal of this regulation is to protect the confidentiality and security of personal information by setting strict standards for data processing, storage and sharing. GDPR applies to any organization, regardless of location, that processes the personal data of EU citizens.
Organizations that don’t comply with GDPR will be fined, and the penalty is hefty. If a company chooses to forgo compliance, for whatever reason, they can be fined up to 4% of their global annual turnover.
Under GDPR, organizations must notify the relevant supervisory authority of a personal data breach within 72 hours if it poses a risk to individuals’ rights and freedoms. In cases where the breach is likely to cause significant harm, affected individuals must also be informed. However, having encryption in place can provide a crucial exemption from these notification requirements. If the breached data was encrypted, rendering it unintelligible to unauthorized users, the organization is not obligated to notify affected individuals. This makes encryption a practical tool for reducing compliance burden and limiting reputational exposure after a breach.
To explore how to handle GDPR compliance in practice:
- Read our in-depth article on the GDPR Right to Erasure
- Read our in-depth article on GDPR requirements for encryption
- Watch the webinar recording How to Handle GDPR Right to Erasure Requests
- Read our in-depth article on the EDPB’s recent Right-to-Erasure findings
News & Blogs
Stay updated with the latest news, insights, trends and expert tips on data protection and cybersecurity.
Check back here regularly for news and blogs