REGULATION
GDPR
The European Union framework governing the processing and protection of personal data.
DEFINITION
GDPR definition
The General Data Protection Regulation, or GDPR, governs how personal data is processed and protected in the European Union and European Economic Area. It sets principles, individual rights and duties for controllers and processors. The legal obligations belong to the client; Cinderpath builds and operates technical controls that can support compliance work.
WHY IT MATTERS NOW
The current operating pressure
Regulatory fact, European Commission: GDPR has applied since 25 May 2018. Consent records, access controls, retention rules and audit evidence still need to match the real movement of personal data through current systems.
WHAT WE DO ABOUT IT
Work connected to GDPR
Access and identity
Identity, least privilege, secrets handling, and the end of shared accounts.
Audit evidence
The logs, records and supplier map an auditor asks for, produced as a by-product of normal operation.
Measurement and attribution
An event schema before tools, server side collection, consent aware measurement.
NEIGHBOURING TAGS
Shared parts of the map
Edge width follows the number of shared nodes
GDPR at the centre, 4 neighbouring tags around it: Observability (1 shared node), NIS2 (1 shared node), DORA (1 shared node) and Fintech (1 shared node).
- Observability
1 shared node
- NIS2
1 shared node
- DORA
1 shared node
- Fintech
1 shared node
Trace the shared concern through your systems
Bring the system boundary and the decisions that need evidence. We will identify the connected work and define a practical starting point.