{"id":786,"date":"2017-12-05T11:26:50","date_gmt":"2017-12-05T15:26:50","guid":{"rendered":"https:\/\/solutionsreview.com\/content-management\/?p=786"},"modified":"2017-12-05T11:26:50","modified_gmt":"2017-12-05T15:26:50","slug":"enterprise-content-management-can-help-gdpr","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/content-management\/enterprise-content-management-can-help-gdpr\/","title":{"rendered":"How Enterprise Content Management Can Help With GDPR"},"content":{"rendered":"

\"\"A new regulation set to take effect in May of 2018 will change the way organizations manage data related to European Union (EU) citizens. The General Data Protection Regulation (GDPR) that was passed last year will replace the Data Protection Directive and aims to protect EU citizens’ personally identifiable information (PII).<\/p>\n

The GDPR applies to businesses based in the EU, but also companies who are collecting the PII of EU citizens regardless of location. If an organization doesn\u2019t take the steps necessary to protect personal data, it could be looking at a fine of up to \u20ac20 million or 4 percent of annual revenue, whichever amount is larger, according to CMS Wire<\/a>.<\/p>\n

The only tricky part is that the GDPR <\/a>doesn\u2019t spell out which processes or technologies companies should integrate to meet the requirements of the new law. However, CMS Wire<\/a> suggests taking a look at an enterprise content management (ECM) solution that \u201ctakes advantage of metadata to enforce the security and governance required to protect customer data.\u201d<\/p>\n

The GDPR was \u201cdesigned to harmonize data privacy laws across Europe, to protect and empower all EU citizens\u2019 data privacy and to reshape the way organizations across the region approach data privacy,\u201d according to the GDPR website<\/a>.<\/p>\n

This new regulation means citizens have better access to personal data that companies collect and know how that data is used, according to CMS Wire. Businesses should start to deploy some type of data protection into any data collection or storage system that is currently utilized. They should also retain only the PII that\u2019s being used for the reason it was collected, CMS Wire reported<\/a>. The regulation also requires that any company processing PII for more than 5,000 people annually appoint a data protection officer (DPO).<\/p>\n

If an organization\u2019s data is breached, they have to report it within 72 hours unless the data is encrypted.<\/p>\n

How an ECM solution can help<\/strong><\/p>\n

Metadata can aid organizations when it comes to compliance and when used with an ECM tool, it can help companies categorize and manage PII in accordance with the new GDPR requirements, according to CMS Wire.<\/p>\n

If contracts and invoices contain sensitive customer information, an ECM tool can treat any file labeled as a contract or invoice as PII. It can also figure out whose data is within any file, given that the new regulations allows citizens to request that businesses offer an index of the PII data that the company has on them.<\/p>\n

When a file or object is labeled as a document that contains PII, an ECM solution can ensure that the proper actions are taken to handle the information properly, including the following, according to CMS Wire:<\/p>\n