Set internal policies – Know your data so you can define the right policies and mechanisms recommended by regulations based on data type and sensitivity.
Ensure protection – Ensure security by complying with regulatory security requirements and protecting the confidentiality of data, including defense against malware and other cyber threats.
Use encryption – Sending, receiving and storing confidential data should be secured by end-to-end encryption to prevent unauthorized access or leaks. If data is encrypted, the processor has ensured a basic level of security under the GDPR and need not report if it is stolen or lost.
Define permissions – Determine who has the right to work with sensitive information and ensure they do this in a compliant way. Define policies and mechanisms to identify and protect sensitive data in all other cases of exchange and communication.
Use disclaimers – The law requires that companies clearly state their privacy policy and inform their customers why they collect their data. Furthermore, when sending newsletters, notification emails or bulletins, companies should always include a visible unsubscribe option so that recipients can opt out of receiving unwanted emails.

DIGITALL iQ.Suite E-Mail Compliance - Enhanced GDPR Messaging O365

autor Digitall