Within the European Union, individuals already have the right to make SARs and they can ask an organisation to deliver all of the personal data that the organisation holds about them. In addition, individuals can request the purposes for which that data is being processed and which organisations receive it. These requests will soon become of global significance as the forthcoming General Data Protection Regulation (GDPR) enhances data subjects’ rights over personal data and will require that organisations adhere to a month time limit on SAR responses. However, meeting this time frame may be difficult, as many organisations have limited visibility into what data they have and where it is located.
SAR preparedness is a critical component of any GDPR compliance strategy and there are a number of ways organisations are preparing to become GDPR ready. New Veritas research released today reveals that many businesses around the world are starting to embrace a compliance culture that extends across the entire company. To read the latest press release on this research, click here.
According to Veritas research, data continues to grow at an annual rate of 49 per cent globally[1], and as a result, organisations are storing more data on-premises and in one or more clouds. Because of this fragmentation, many organisations have limited visibility into what data they have and where it is located, so finding relevant personal data in a timely fashion becomes a significant challenge.
Veritas’ latest eDiscovery Platform directly addresses these challenges by helping organisations quickly pinpoint personal data and review it to assess what personal data should be disclosed and what may be lawfully withheld. In addition, the eDiscovery platform will deliver a response package electronically that sufficiently addresses the GDPR’s SAR requirements so businesses can help ensure regulatory compliance, avoid massive fines, and mitigate reputational damage.
Defensible Data Discovery with Integrated Data Classification
Veritas eDiscovery Platform now includes complete integration with the Veritas Classification Engine by delivering powerful intelligence into data risks on-premises and in the cloud. Through this new integration, customers can quickly scan and tag data, using a pre-designed set of classifications. This helps to ensure that sensitive or risky information is properly managed and protected. The Platform also enables enterprises to adhere to SAR requests by locating where PII exists across their entire organisation and driving actions that help appropriately retain or delete this data, when necessary.
This is a major advancement that helps organisations reduce the overall number of files required for review by culling out data required by the business. In addition, customers can prioritise review efforts by stack ranking the items that are most relevant to analyse. This innovation is critical in helping organisations adhere to mandatory compliance guidelines under new regulations, such as GDPR.
“Data is growing at an exponential rate and we are continuing to see a global rise in industry-specific and data protection regulations,” said Rama Kolappan, vice president, Product Management and Alliances, Veritas. “Organisations are in urgent need of tools that can accurately review, cull and manage relevant data regardless of where it resides within an organisation. With the release of our latest eDiscovery Platform, we are helping customers respond quickly and efficiently to requests and manage their regulatory and investigative matters with a single, easy-to-use application.”
Expediently Review and Redact Data to Meet Stringent Timelines
The latest version of eDiscovery Platform includes a new set of review and redaction tools that allow for smarter and faster review. Bulk Redaction is a new feature that can automatically comb through a data set and mask all sensitive data in categories pre-determined by the reviewer across the entire corpus in one single motion. This capability helps organisations to ensure that they are not accidently leaking risky data that should have been withheld (such as personal data relating to another individual) when responding to a SAR.
Additionally, eDiscovery Platform now includes pre-set redaction codes to ensure consistency throughout the document review process and to enable users to demonstrate to individuals why particular data items were withheld. This release also includes new annotation capabilities that simplify how case handlers mark-up review documents and share notes with each other to better support collaborative workflows for data sets that require multiple reviewers.
