Company warns of dangers of non-compliance with EU Data Protection Regulation

Mr John Edokpolor, Lead Commercial Attorney, Microsoft MEA Emerging Markets, said in Lagos that May 25 would be the deadline for compiance with the regulation.

Edokpolor spoke at a media briefing.

The News Agency of Nigeria (NAN) reports that, in the GDPR (EU) 2016/679) the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union.

The regulation will take effect from May 25. It replaces the Data Protection Directive which has been in effect since 1995.

NAN also reports that the new regulation became a law in April 2016, but given the significant changes some organisation will need to make to align with the regulation, a two-year transition period was included.

According to Edokpolor, failure to adhere to GDPR requirements can prevent trade and other dealings with EU businesses after the deadline.

““The new legislation is a milestone on a journey into a new era, where data is the fuel powering companies of all shapes and sizes, from all sectors.

“”GDPR is a new European law designed to protect the privacy of citizens by setting new standards in terms of how personal data is handled.

“”As the law affects any organisation with ties to Europe, it is relevant to businesses around the world,” he said.

Edokpolor said that as companies increasingly embraced the cloud, they had an unprecedented ability to capture and store massive amounts of data.

He said that advancement in business intelligence technology had given organisations the ability to pull insights from data prediclive in nature.

“He advised that businesses should be a step ahead of customer expectations and needs, instead of merely reacting to them.

“”This is a significant step forward and truly marks the beginning of a new era, one in which data becomes the electricity powering companies.

“An updated governance framework for data protection is a logical policy component of this new age.

“”Building on these rules, innovation coupled with trust among businesses and citizens will unlock productivity, help companies to keep their customers delighted and fuel a new generation of disruptors.

“Ultimately, all of these translate into growth,” he said.

He said that data which was the most important asset in a modern company’s business portfolio needed the GDPR as a logical policy since it would guarantee the privacy and integrity of individuals’ data.

Edokpolor said that, with the compliance deadline approaching, many companies were thinking of steps to take to meet the new privacy and data protection requirements as efficiently and effectively as possible.

He said that achieving this would depend on how the companies would address three things – people, processes, and preparedness.

The attorney listed some principles that could help to achieve the compliance to include effective data management and creation of data confidence culture.

According to him, effective data governance demands a people-first approach.

“”Every business maintains strict processes for tracking revenue, costs, and all manner of financial flows.

“They don’t just do this because it is required, but because it makes business sense.

“”You cannot map your company’s future if you do not know your current state of financial affairs to the bottom line.

“Companies need to maintain the same birds-eye-view of their data assets, via a solid data governance strategy,” he said.

`Edokpolor said that there was the need to place approach to data governance within the context of a broader digital transformation.

According to him, the May 25 deadline for GDPR compliance is not a final destination.

“Rather, it is just one stepping-stone in an ongoing journey toward realising the full potential of digital transformation across economies and communities.

“Establishing a firm approach to data governance represents one of the smartest investments a company can make.”