As Veeva Senior Counsel and Data Protection Officer, the General Data Protection Regulation (GDPR) has been on my radar for a long time. I\u2019ve had many conversations both internally and externally with our customers across the globe about its impact. What I\u2019ve come to realize is that GDPR presents a genuine opportunity to improve your business, become more efficient, and create better relationships with your customers by operating in a way that fosters trust and transparency. <\/p>\n
Here\u2019s what you need to know about the GDPR \u2013 and how to prepare for it.<\/p>\n
What is GDPR?<\/strong> Put simply, it\u2019s a shift to make companies more accountable for the way they process personal data. The previous data protection directive, which dates back more than 20 years, required companies to register with the relevant authorities in each of the markets where they operated. It was complex to manage \u2013 particularly for global companies. While GDPR creates more responsibility for organizations, it also allows companies more flexibility to decide how they manage personal data according to their particular business case. <\/p>\n What are the main implications of GDPR?<\/strong> GDPR puts the data controller and data processor on equal footing. It strengthens the requirements of processors to process data and creates a joint liability in the event of any violation. There are strong penalties for non-compliance that can amount to 4% of global annual turnover or \u20ac20 million, whichever is greater. <\/p>\n How can you prepare for GDPR?<\/strong> My advice is to consider GDPR as an opportunity to assess how your company processes data. Data in the past has been stored in various siloes. GDPR can be an internal housekeeping exercise to identify what kind of data you have and what kind of data you need. There is a principle of data minimization under GDPR, which means there\u2019s no reason to keep more data than necessary for the purpose for which it was originally collected. <\/p>\n Once you do this data-mapping exercise, you can see where data has not been used to its fullest potential. This will be an advantage to GDPR compliance: the opportunity to better use your data, to better engage with your customers, and to reduce unnecessary data.<\/p>\n What is Veeva doing in relation to GDPR?<\/strong> Where can you learn more? <\/strong> With the General Data Protection Regulation (GDPR) coming soon, Ashley Slavik, Veeva senior counsel and data protection officer, considers how GDPR will impact life sciences organizations and what you can do to prepare.\u00a0<\/p>\n","protected":false},"author":80,"featured_media":13808,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[1],"tags":[],"product":[1003],"area":[972],"coauthors":[1529],"class_list":["post-17443","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","product-network-mdm","area-commercial"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t
\nGDPR is an overarching data protection law that applies to all European Union (EU) residents from 25 May 2018. It concerns personal data, which is data that directly or indirectly identifies a person residing in the EU. It applies to any company or entity that markets goods or services to EU residents. <\/p>\n
\nOne of the key changes with GDPR is that it creates shared responsibility and liability between the data controller and the data processor. Previously, responsibility was primarily on the data controller (the entity responsible for collecting the data) but not on the data processor (companies such as Veeva who provide software that leverages data). <\/p>\n
\nOne of the requirements under GDPR is that each organization should have a data protection officer. So if your business doesn’t have a data protection officer, you need to appoint one. Then, you can start to discuss the way your business processes data and how you want to demonstrate compliance. Having stakeholders from different parts of the organization is critical in those discussions as data protection impacts sales, marketing, HR, and many other internal processes. It really is a business-wide issue. <\/p>\n
\nWe play an interesting dual role as a data controller for Veeva OpenData and Veeva Oncology Link data products and as data processor for the rest of our product suite. One of the major changes under GDPR is to make sure that our obligations of transparency, breach notification, record-keeping, and data transfer are all very clear in our customer agreements. So one of the main things we\u2019ve been doing is working with our customers to make sure that we are aligned on GDPR. <\/p>\n
\nTo find out more about how Veeva can help you with GDPR readiness, go to\u00a0www.veeva.com\/eu\/gdpr<\/a>. <\/p>\n","protected":false},"excerpt":{"rendered":"