The European Union (EU) has generally enforced stricter rules on data protection, but its 1995 Data Protection Directive is now outdated – it does not address the many ways in which data is stored, collected, and transferred today. This has necessitated the new EU General Data Protection Regulation (GDPR). GDPR comes into effect on May 25, 2018, with a two-fold objective. The first it to give EU residents more control over the use of their ‘personal data’. By strengthening data protection legislation and introducing stricter enforcement measures, the EU hopes to improve trust in the emerging digital economy. Secondly, the EU wants to give businesses a simpler, more transparent legal environment to operate.
Review all of our global compliance programs
Why is GDPR required?
GDPR compliance is required by all organizations who have:
- A presence in an EU country.
- No presence in the EU but processes the personal data of European residents.
- More than 250 employees.
- Fewer than 250 employees but its data-processing impacts the rights and freedoms of data subjects, is not occasional or includes certain types of sensitive personal data. This effectively means almost all organizations.
Is Tata Communications GDPR compliant?
Tata Communications is committed to GDPR compliance across cloud services. We are also committed to helping our customers on their GDPR compliance journey by building robust privacy and security protection into our services.
Our cloud and hosting solutions already have specific features and services which ensure compliance with GDPR:
- Access management
- Authentication Mangement
- Network management
- Dashboard view of activities on your resources
- Data encryption
- Data governance
The shared responsibility model:
Both the customer organization and Tata Communications have essential roles in ensuring GDPR compliance objectives. Organizations are directly responsible for their applications and data, data access and encryption. Partners, meanwhile, are responsible for the underlying infrastructure, physical access control and operational security.
ABOUT GDPR
GDPR gives EU residents more control over the use of their ‘personal data’. By strengthening data protection legislation and introducing stricter enforcement measures, the EU hopes to improve trust in the emerging digital economy. Secondly, the EU wants to give businesses a simpler, more transparent legal environment to operate.
Contact us
Contact us to learn how we can help you unleash collaboration, creativity, and commercial innovation.