# Key to GDPR compliance: Controlling access to personal data
Author:  Pal Sinha, Barnali 
Author URL: https://financedigest.com/author/pal-sinha-barnali
Published: 2017-07-28
Category: TECHNOLOGY
Category URL: https://financedigest.com/category/technology
Meta Title: Achieve GDPR Compliance with Adaptive Authentication
Meta Description: Enhance GDPR compliance with adaptive authentication solutions. Control access to personal data, manage user visibility and security layers effectively.
Tags: featured
Tag URLs: featured (https://financedigest.com/tag/featured)
URL: https://financedigest.com/key-to-gdpr-compliance-controlling-access-to-personal-datahtml

![undefined](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/wm2a0901-1189-1-1736843644882-compressed.jpg)

By **Thierry Bettini**, Director of International Strategy, [Ilex International](http://www.ilex-international.com/en/)

![Thierry Bettini](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/photocodirbettinithierry-1736843644775-compressed.jpg)

Thierry Bettini

The General Data Protection Regulation (GDPR) is not a technology issue. When the GDPR comes into effect on 25 May 2018 it will demand organisations record and demonstrate control over who can access any personal identifiable data that is collected or stored from any individual in the European Union (EU). The establishment of this capability is the true technology issue [companies will face](https://www.financedigest.com/factbox-what-european-companies-are-doing-as-workers-face-high-inflation.html "Factbox-What European companies are doing as workers face high inflation") when adapting to the new regulation.

GDPR will [change the game](https://www.financedigest.com/how-technology-is-changing-the-game-in-construction.html "How Technology is Changing the Game in Construction") when it comes to consumer control over their privacy and data. The regulation aims to harmonise data privacy legislation across the EU, and [protect every person using technology](https://www.financedigest.com/recent-technological-advancements-to-propel-growth-of-the-2k-protective-coatings-market-in-foreseeable-future.html "Recent Technological Advancements to Propel Growth of the 2K Protective Coatings Market in Foreseeable Future"), regardless the degree to which they use it. Much has been said about the big stick fines GDPR threatens, of up to 20 [million euros](https://www.financedigest.com/spains-king-felipe-reveals-2-6-million-euros-in-wealth-in-bid-to-make-royal-house-more-transparent.html "Spain’s King Felipe reveals 2.6 million euros in wealth in bid to make Royal House more transparent"), or four percent of an organisation’s global annual turnover, for failure to comply. But there is also a carrot.  With the knowledge that, in our digital world, being able to create trusted customer relationships is a business opportunity, as well as a wealth generator, GDPR legislators have [created opportunities](https://www.financedigest.com/tire-materials-market-to-create-an-incremental-opportunity-of-us-99-99-bn-by-the-end-of-2028-fmi.html "Tire Materials Market to create an incremental opportunity of US$ 99.99 Bn by the end of 2028 – FMI") for businesses to differentiate themselves.  Companies can get ahead of the game by achieving, creating and marketing [GDPR data](https://www.financedigest.com/the-gdpr-and-the-future-of-data-transfer-by-ben-seretny-head-of-dpos-the-dpo-centre.html "The GDPR and the future of data transfer – by Ben Seretny, Head of DPOs, The DPO Centre") protection certification marks and seals. #

Right now, organisations are at very different points in their journey towards GDPR. This means there is an increased [demand to answer hard data](https://www.financedigest.com/oil-eases-as-weak-asian-data-more-lockdowns-dampen-demand-hopes.html "Oil eases as weak Asian data, more lockdowns dampen demand hopes") accountability questions, such as:

- Why are we holding personal data?
- How did we get it?
- Why was it gathered originally?
- How long has it been held?
- How secure is the data in terms of accessibility and encryption?
- Do we [share this data](https://www.financedigest.com/u-s-yield-curve-inverts-after-strong-jobs-data-world-shares-mixed.html "U.S. yield curve inverts after strong jobs data; world shares mixed") with third parties?

Answering these questions, especially the last two, requires a robust and fool proof approach to limiting access to personal data, with reference to a clear audit trail of when the data was accessed and by whom. This is just one of the many steps heading towards compliance with the GDPR’s accountability principle, which requires organisations to demonstrate and document fine-grained compliance with data [protection principles whilst doing business](https://www.financedigest.com/fx-hedging-strategies-to-protect-your-business.html "FX hedging strategies to protect your business").

**Adaptive Authentication**

When it comes to Privacy Impact Assessments, weak access credentials or authentication processes will be [red flags](https://www.financedigest.com/finance-brokers-bank-on-red-flag-alert-to-help-beat-fraud.html "FINANCE BROKERS BANK ON RED FLAG ALERT TO HELP BEAT FRAUD") for GDPR compliance officers. Proving, as well as controlling, who is accessing personal information, where they are accessing it, and for what purpose, will be critical.Organisations can limit this risk with easily managed, flexible multi-factor authentication solutions, applicable to any personal data, wherever it may reside.

How can Adaptive Authentication [effectively support your organisation’s strategy](https://www.financedigest.com/5-simple-steps-to-an-effective-customer-complaint-response-strategy.html "5 Simple Steps to an Effective Customer Complaint Response Strategy") to achieve GDPR compliance?

- Manage, control and administer all of your users and endpoints in one central place
- Allow and establish visibility of precisely who is accessing personal information and from where
- Build [additional security layers to ensure and prove your protection](https://www.financedigest.com/antimicrobial-protection-additives-for-adhesives-market-incredible-possibilities-growth-analysis-and-forecast-to-2028.html "Antimicrobial Protection Additives for Adhesives Market Incredible Possibilities, Growth Analysis And Forecast To 2028") of personal information
- [Protect privileged accounts](https://www.financedigest.com/midlands-accountants-say-its-never-too-early-to-get-financial-protection.html "MIDLANDS ACCOUNTANTS SAY IT’S NEVER TOO EARLY TO GET FINANCIAL PROTECTION") from misuse and breach
- Offer a practical and cost-effective way to deliver Privacy by Design principles
- Compliant with all relevant industry standards

**Simple for administrators :** Adaptive [Authentication works](https://www.financedigest.com/get-real-how-to-be-your-authentic-self-at-work.html "Get real: How to be your authentic self at work") across all commonly-used devices, and gives administrators the ability to set and manage granular controls around access variables. These may include elements such as user privileges, geographical location, type of browser, time of day or authentication type.

**Simple for Data Protection Officers**: When you talk to your Data Protection Officer (DPO), applying this level of contextual, behavioural [risk management](https://www.financedigest.com/crypto-investors-step-up-risk-management-after-last-years-meltdowns.html "Crypto investors step up risk management after last year’s meltdowns") will reassure them that you have the necessary control of data access for GDPR compliance. Let’s not forget that the introduction of GDPR will include the 72 hour breach-reporting requirement that will come into force next May. Using Adaptive Authentication will enable you to show your DPO how easily and quickly you can run a [detailed report](https://www.financedigest.com/diabetic-foot-ulcers-and-pressure-ulcers-market-revenue-status-and-outlook-2016-2024-detailed-in-new-research-report.html "Diabetic Foot Ulcers and Pressure Ulcers Market Revenue Status and Outlook 2016-2024 Detailed in New Research Report") of exactly which data was accessed.

**Simple for Users**: Any layers of [access control an organisation may implement should always be effective](https://www.financedigest.com/the-npwt-suction-pads-market-to-grow-on-an-effective-and-accessible-note-backed-by-innovation.html "The Npwt Suction Pads Market to grow on an effective and accessible note backed by innovation"), but also simple for anyone to use.  Once a user gains access, the smart solution remembers the various elements of that connection in context. This may include aspects such as the device used, the web browser, the IP address, etc. This is one of the ways an Adaptive Authentication [solution will combine user-friendly and efficient](https://www.financedigest.com/scanwriter-v-verafin-which-solution-can-help-you-unravel-financial-scams-efficiently.html "ScanWriter v. Verafin: Which Solution Can Help You Unravel Financial Scams Efficiently?") activity with ultimately reduced risk online.

GDPR is coming, but this doesn’t have to be a bad thing. [Adaptive Authentication systems are an easily-implemented and effective way to ensure complete compliance with the new regulation](https://www.financedigest.com/eu-regulator-hopes-to-approve-covid-variant-adapted-vaccines-by-autumn.html "EU regulator hopes to approve COVID variant-adapted vaccines by autumn"), which can only be a good thing in the long run in both the online and physical worlds.

To find out more about Ilex International and it’s range of Identity and Access Management solutions, click [here](http://www.ilex-international.com/en/).

**Thierry Bettini**

Thierry holds a PhD in Economics from the Sorbonne University and has over 25 [years of experience in the IT industry](https://www.financedigest.com/abb-dispels-industrial-gloom-to-raise-full-year-outlook.html "ABB dispels industrial gloom to raise full-year outlook"). His career started at [Air France](https://www.financedigest.com/air-france-cancels-55-of-short-medium-haul-flights-sept-16-due-to-strike.html "Air France cancels 55% of short, medium-haul flights Sept. 16 due to strike") in London and New York where he led several IT projects and participated in the major restructuring of the company’s Sales and Marketing strategy. He then went on to hold [senior executive](https://www.financedigest.com/societe-generale-says-two-senior-executives-to-leave-bank.html "Societe Generale says two senior executives to leave bank") positions for international software vendors and IT consulting firms.

Thierry’s return to Ilex in 2014 coincided with the company’s decision to consolidate its [strong position in Europe and to focus on its international development](https://www.financedigest.com/unconventional-gas-market-to-observe-strong-development-by-2018-2026.html "Unconventional Gas Market to Observe Strong Development by 2018-2026").


---
This blog is powered by Superblog. Visit https://superblog.ai to know more.
---