In response to Luke Horton-Walker from Cameo’s recent opinion piece about what resellers need to know about protecting data in the channel, Iain Shaw, Commercial Director at Brigantia Partners, discusses why structure is required to safeguard data and how GDPR compliance tools can help with this.
Firstly, I just want to say that Luke’s article is a well written piece and I do not disagree with any of the points raised. However, I do feel that for a channel business to enter this space, structure will be required, a lot of structure.
The entirety of Data Protection legislation is there to try to help safeguard both people who the data is about (data subjects) and the organisations which hold and process the data. It does seem to be though, that most organisations see this as a costly inconvenience and there is usually very little desire to go down this route, at least not for the right reasons.
Logically if you are looking for the best outcomes for your business then doing your best to safeguard against any attacks and / or data breaches would be a very desirable thing, so doing your best to comply with the Data Protection laws would be a great place to start. I can only assume that those that do not look at the world this way have not understood / considered the pros and cons of the situation.
Getting back to the concept of there being a structure to make this all usable: there are several good examples that organisations can opt for. One of the most widely recognised is ISO 27001 and this speaks volumes about an organisation’s commitment to data security. Not to be taken lightly, once attained it requires constant attention with various audits throughout its three-year license: ISO 27001 is not a low-cost option and it is far from easy to change how an organisation operates so as to comply with the new constraints placed upon it.
An easier and more logical step for most organisations would be to investigate GDPR365 which, built from the ground up to be an ongoing GDPR compliance tool is geared exactly to helping an organisation not only achieve compliancy but also to maintain it. It is worth bearing in mind that this is not a box-ticking exercise but rather a collaborative effort from individuals in various roles. It is all measurable and as result progress on all fronts can be seen from the dashboard, problems identified at an early stage and necessary actions subsequently taken.
In short, this is very well thought out tool and for anyone wanting to bring some order to the data that they handle, this is well worth checking out.
To be put in touch with your local GDPR365 specialist, please email firstname.lastname@example.org or call Brigantia on 020 3358 0090.
Are you a Distributor, Vendor, Retailer, Reseller or Channel Services Provider? Don’t miss your chance to win a PCR Award! Submit your entries for free here before 6th December!
Read the latest edition of PCR’s monthly magazine below: