How does Data Cuckoo help with GDPR compliance?
The EU General Data Protection Regulation (GDPR) comes into force on 25 May 2018. GDPR compliance is especially challenging for small or medium sized companies as they generally lack the skills or budget to embark upon wide-ranging IT purchases or restructuring.
Data Cuckoo has been developed after years of working with small and medium sized businesses. We know that many of these companies are being run from spare rooms, garages, home offices or out of enterprise zones and modest offices. These businesses are the backbone of most economies, yet it is incredibly common to find a domestic internet connection and an inexpensive or aging router - often one that was bundled for free with the internet connection - attempting to protect this entire business network from today's online threats.
If this is you, no doubt one particular requirement of the GDPR is especially challenging:
"You should ensure you have robust personal data breach detection, investigation and internal reporting procedures in place..."
Domestic internet connections and routers are completely oblivious to the idea of data leaks and breaches - they have no facilities to detect, prevent or report if someone is trying to gain access to your network, or if someone is taking a copy of your private information.
However, to protect the public, the penalties for not detecting and reporting these leaks of data (“personal data breaches” in the language of the GDPR) are especially punishing:
"You must report a notifiable breach without undue delay, but not later than 72 hours after becoming aware of it. If a third party discovers a data breach and goes public with it before you report it it could lead to a maximum fine of 2% of global annual turnover or €10 million, whichever is greater."