| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 233.13 KB | Adobe PDF |
Advisor(s)
Abstract(s)
The General Data Protection Regulation 2016/679 (GDPR) is a set of legal rules to attain the privacy of people in the handling of their personal data and the movement of such data across countries. When those rules are considered in the operation of information systems, the one becomes attainable for legal
approval within that scope. This paper presents a model we are developing to help enterprises do align their information system with the GDPR requirements. The model shall serve the purpose of analyzing the enterprises in what concerns the use of the subject’s personal data, allowing to capture and improve data
protection capabilities placed in the GDPR. The main issue of our approach is to set a baseline to define the requirements for establishing, implementing, maintaining and continually improving data protection management system on organizations.
Description
Keywords
Personal data protection Regulation (EU) 2016/679 GDPR
Citation
Publisher
Springer Link