PRO+ Premium Content/Information Security

The European Union's General Data Protection Regulation may be the most important information security issue you've never heard of -- but everyone will be talking about GDPR compliance by the time the EU begins enforcement of the new regulation starting May 25, 2018. The new privacy regulation includes requirements for protecting personal information, making sure it stays private and giving individuals the right to verify and control their own data, up to and including granting the "right to be forgotten." With just a year before the regulation takes effect, the stakes are high: Failure to achieve GDPR compliance can trigger fines of up to 4% of a company's gross revenue for a year, or 20 million euros -- whichever is greater. Information Security magazine spoke about GDPR compliance with Microsoft's chief privacy officer, Brendon Lynch. This interview has been edited for length and clarity. The EU's General Data Protection Regulation will begin enforcement in a year. Just how big a deal is this going to be? Brendon Lynch: I've ...