What changes for Internet of Things technologies with the EU Data Protection Regulation

www.dlapiper.com 1Insert date with ‘Firm Tools > Change Presentation’
WHAT CHANGES FOR INTERNET
OF THINGS TECHNOLOGIES WITH
THE EU DATA PROTECTION
REGULATION?
Speakers:
Giulio Coraggio – DLA Piper, Italy (Giulio.Coraggio@dlapiper.com)
Antoon Dierick – DLA Piper, Belgium (Antoon.Dierick@dlapiper.com)

Our DLA Piper team today
Giulio Coraggio
DLA Piper, Italy
(Giulio.Coraggio@dlapiper.com)
Antoon Dierick
DLA Piper, Belgium
(Antoon.Dierick@dlapiper.com)

Agenda
1.Timing, scope and importance of the GDPR for IoT technologies
2.What changes for Internet of Things technologies
3.What to do to be ready in 2018
4.How DLA Piper can help you

A single data protection law across the whole
European Union, with some exceptions…
Put 25 May 2018 in your agenda!

 Purpose GDPR:
Protection constitutional rights and fundamental freedom of individuals; more
in particular protection of personal data.
 Personal data:
"any information relating to an identified or identifiable natural person ('data
subject'); an identifiable natural person is one who can be identified, directly or
indirectly, in particular by reference to an identifier such as a name, an
identification number, location data, an online identifier or to one or more
factors specific to the physical, physiological, genetic, mental, economic,
cultural or social identity of that natural person"
Personal data

It applies to wherever you are located
both
One stop shop benefits

Regardless of whether you are a B2B or a B2C
supplier if personal data is processed
New obligations for data processors…
Renegotiating
data processing agreements?

Why is it so important for IoT technologies?
Large amount of data
Sharing of data
(M2M or individual to
machine)
Deep profiling of
customers
Often
transferred
cross border

And the potential sanctions are now massive
of the global turnover
New accountability principle…

Also cyber risk becomes a higher threat…
in case of data breach….
Security measures
adequate or not?

Agenda

You can still collect data…

The IoT needs to grow, so what to change in your
products and organization?

Is your customer's profile portable?
old car new car
profile

Transfering of data outside the EEA
Same rules
but…

Are you going to be certified?
Where is the burden of the privacy certification
going to stand?

Agenda

1. Mapping the data that is currently processed within the group and assessing
whether all data processing is necessary
2. Assessing how data is processed by the company and the technical
infrastructure
– review of internal policies (if any)
– review of technical functioning of IoT products/services
1. Deleting data that is not necessary and represents only a potential risk
2. Reviewing the current data processing agreements
What is on your immediate to do list?
What to do to be ready in 2018 > To do list

5. Assessing whether the current group structure is privacy efficient under the
one-stop shop rule
6. Appointing a data protection officer (or outsourcing it to a third party)
7. Planning the implementation of
1. Internal policies
2. Privacy impact assessment
3. Privacy by design and privacy by default
4. Security by design
What is on your immediate to do list? (ii)
What to do to be ready in 2018 > To do list

Agenda
1.Timing, scope and importance of the GDPR for gambling companies
2.What changes for gambling companies

How DLA Piper can help you > DLA Piper GDPR Compliance Methodology
 GDPR Impact Assessment: Tailored
assessment of the relevance of the GDPR
provisions
 Gap Analysis: Analysis of the actual level of
compliance
 Internal evaluation and prioritization:
Determining risk appetite of the company and
action plan
 Implementation: During this phase, the
action points identified in the action plan
during Module 3 will be implemented. This
should consequently result in taking the
necessary measures to achieve compliance
with GDPR requirements
 Consolidation of Compliance: Avoiding
GDPR infringements (internal and external
documentation)

How DLA Piper can help you > DLA Piper standard privacy tools

Access our
Data Protection Laws of the World
Handbook at
www.dlapiperdataprotection.com
How DLA Piper can help you > Stay informed

Questions?
Giulio Coraggio
DLA Piper, Italy
(Giulio.Coraggio@dlapiper.com)
Antoon Dierick
DLA Piper, Belgium
(Antoon.Dierick@dlapiper.com)

What changes for Internet of Things technologies with the EU Data Protection Regulation

More Related Content

What's hot (19)

Viewers also liked (14)

Similar to What changes for Internet of Things technologies with the EU Data Protection Regulation (20)

More from Giulio Coraggio (20)

Recently uploaded (20)

What changes for Internet of Things technologies with the EU Data Protection Regulation

Editor's Notes