{"id":5531,"date":"2018-10-01T01:02:53","date_gmt":"2018-10-01T00:02:53","guid":{"rendered":"https:\/\/citysecuritymagazine.com\/?p=5531"},"modified":"2022-09-06T10:37:48","modified_gmt":"2022-09-06T09:37:48","slug":"privacy-by-design-security-strategy-for-gdpr","status":"publish","type":"post","link":"https:\/\/citysecuritymagazine.com\/editors-choice\/privacy-by-design-security-strategy-for-gdpr\/","title":{"rendered":"Privacy by design – A security strategy for GDPR\u2008compliance"},"content":{"rendered":"

A security strategy for GDPR\u2008compliance –\u00a0Privacy by design<\/strong><\/h1>\n

On May 25 2018, the General Data Protection Regulation (GDPR) came into effect. For many, this shouldn\u2019t have come as a shock.<\/p>\n

Since the European Union announced the GDPR mandate over two years ago, many businesses have implemented tighter controls to protect people’s personal data. In fact, according to a recent survey by Coleman Parkes Research, 72% of organisations worldwide believe they will be ready for GDPR compliance. While this is great news, there are still many businesses that struggle to fully understand how these regulations impact their organisation or what they need to do to comply.<\/p>\n

From a physical security perspective, there\u2019s much to consider. That\u2019s because most organisations collect and store personal identifiable information through the security solutions that safeguard their business. For instance, public video surveillance is considered a high-risk operation, and protecting this data is just one side of the coin. Under GDPR legislation, consumers also have greater levels of consent. This means that at any point in time, an EU resident has the right to access and view their personal information, including any images or video of them. If a company fails to deliver, not only will they face hefty fines but the damage to their reputation could be immense.<\/p>\n

The public demand for more protected and private data \u2013 as played out in the recent Facebook revelations \u2013 along with the threat of serious financial penalties, has thus accelerated the motivation and urgency for organisations to implement security technologies that are designed, from the start, with data privacy and protection in mind. This approach is known as Privacy by Design. Below, we\u2019ll explore how this strategy helps businesses acclimatise to changing data regulations to protect people\u2019s privacy and keep information safe over the long term.<\/p>\n

Building a system that respects privacy<\/h6>\n

Designing compliance into existing security technologies is difficult. Many businesses with legacy security equipment or older proprietary systems will have a harder time attaining GDPR-compliance. Some security systems simply cannot enable and support the fundamentals of data security and privacy which ensure confidentiality, integrity and availability of data. While an organisation could try to patch solutions onto existing systems and infrastructures to help mitigate risks and become compliant, vulnerability could still lurk.<\/p>\n

For instance, if a retail shop receives a request from a customer to see collected video footage, will that retailer be able to safely share those video files while protecting the identities of other individuals in the frame? Or, what would happen if a hospital\u2019s busy security team failed to notice a camera going offline, and that one device becomes the pathway to a breach of patient information?<\/p>\n

Implementing a unified security solution that is built with the latest privacy features in mind is a must. It allows each organisation to design a security platform that empowers their team to effectively do their job \u2013safeguarding people and assets \u2013 while protecting video data and individual privacy.<\/p>\n

Each business must be able to hand-pick and enable privacy protection capabilities which are best suited for their unique environment. These can include:<\/p>\n