Information security company聽Shred-it has released a new online self-service tool designed to support businesses on their journey to聽General Data Protection Regulation (GDPR) compliance.
GDPR Manager follows guidance from the Information Commissioner鈥檚 Office (ICO) and meets its expectations by demystifying the complexity surrounding compliance.
The tool guides users through a six-step process, from initial assessment to creating a manageable action plan.
The launch follows recent survey findings in Shred-it鈥檚 2018 State of the Industry Report that 22 per cent of small business owners were totally unaware of the GDPR鈥檚 implementation.
Furthermore, only 39 per cent of large organisations had updated their procedures for detecting, reporting and investigating a data breach.
One of the most crucial aspects of compliance is being able to demonstrate how a company acquires, manages, stores and destroys personal data, or Personally Identifiable Information (PII).
鈥淎ll organisations that collect, process and store PII must now put in place technical measures to manage the transparency and consent requirements of the new regulation,鈥� said GDPR SaaS business manager David Hagelthorn.
鈥淗owever, our 2018 State of the Industry Report highlighted that just 44 per cent of large businesses and 19 per cent of small businesses have documented a lawful basis for processing data.
鈥淏y adding GDPR Manager to Shred-it鈥檚 compliance portfolio, we are further showcasing our drive to help businesses both large and small protect what matters to them most – their reputation, their people and their customers鈥� data.鈥�
The GDPR Manager tool enables businesses to take a holistic approach to data security and privacy.
The platform is mapped to the relevant sections of the GDPR and facilitates ongoing accountability to data protection principles.
It features best practice guidelines, analysis tools and a library of legally vetted sample policy and procedural templates all accessible 24/7 from any location and on any device.
With data management now in sharp focus, the online tool gives a company the ability to prove how it manages its data, critical to ensuring compliance with the GDPR.
By having all the data and procedure management information in one place, a company can demonstrate accountability within one hour which, according to the ICO, is a key requirement.
鈥淎s a result of developing this tool to meet the expectations of the ICO, purchasing and using GDPR Manager will help demonstrate that a company is working towards compliance,鈥� said Hagelthorn.
鈥淲e all know the large fines and potential ramifications of non-compliance, so we鈥檙e excited to be able to provide our customers and other businesses with a clear and structured pathway to GDPR compliance.鈥�