Compliance
GDPR
The GDPR is the European Union regulation governing the protection of personal data.
What it is
The General Data Protection Regulation sets obligations for organisations that process the personal data of individuals in the EU and EEA. Article 32 requires appropriate technical and organisational measures to ensure the security of processing, including the ability to test and evaluate those measures.
Background
Regulation (EU) 2016/679 took effect in May 2018 and applies to organisations worldwide that handle the data of EU/EEA residents. Penalties can reach the greater of EUR 20 million or 4% of global annual turnover.
How EthicalStrike helps
EthicalStrike helps demonstrate the “testing, assessing and evaluating” of security measures that Article 32 calls for, with findings and remediation evidence that support your accountability obligations.
EthicalStrike supports your compliance efforts by testing your network and mapping findings to this framework. It is not a substitute for formal certification or an audit by an accredited body.