Updated: May 13, 2020

What is GDPR?

The EU GDPR protects private data in the European Economic Area and the European Union. These regulations also apply to the transfer of defined personal data outside of those areas. The aim of this data protection regulation is to unify the requirements across the EU and simplify the process of doing business internationally. 1

The GDPR provides guidelines for storing, processing, and protecting customers’ personal data. The position of Chief Data Officer designs and implement plans to achieve and maintain GDPR compliance within your organization.

What Types of Businesses and Organizations Need a Chief Data Officer?

The Chief Data Officer takes ownership of the organizations’ compliance with GDPR requirements, especially the responsibility to report a data breach within 72 hours. The requirement to have a CDO applies to organizations that:

  • Have data processing operations that monitor data subjects or individuals on a large scale.
  • Manage special categories of protected data, which include location, health status, sexual orientation, race, gender, or religious affiliation.
  • Are a public authority or body which processes personal data, with the exception of legal court systems in the operation of their judicial duties.

What Are the Responsibilities of a Chief Data Officer?

Articles 37 and 39 of the GDPR state that the CDO should be appointed on the basis of “professional qualities ... and expert knowledge of data protection law and practices.”2

The CDO is responsible for overseeing a company’s complete compliance with applicable data regulations.

This means that the Chief Data Officer is responsible to create processes and fail-safes to protect customer data while in the organization’s possession and during transfer if required. Scheduled and secure data destruction of private information as soon as the justified business need for it has been achieved is part of the guidelines.

Disk cleanup and IT asset wiping prior to equipment disposal are other best practices required to protect customer information. The CDO is also responsible for staff education, responding to regulatory requests, and reporting of data breaches within 72 hours.

Providing Your CDO with Resources for Compliance

There are penalties outlined in the GDPR for failing to appoint a CDO and for failure to comply with the regulations themselves. The Chief Data Officer is intended to be a central point of contact and responsibility for compliance.

Of course, simply having a process and the expertise to manage a large scale data processing operation securely is not enough. Providing your CDO with compliant 3rd-party solutions and partners will keep all parts of your data-handling within the GDPR guidelines.

WipeDrive Enterprise by WhiteCanyon Software is a certified compliant solution for data destruction as part of your process. Contact us today at 801.224.8900 for tools and consulting to simplify and secure your processes to meet or exceed your industry requirements.

Sources

  1. en.wikipedia.org/wiki/General_Data_Protection_Regulation
  2. itproportal.com/features/the-chief-data-protection-officer-and-the-chief-data-officer-how-these-roles-can-change-your-business