CCF EMEA: Security: How is GDPR affecting the channel and customers? How should you be preparing?
Claudio Stahnke, Research Analyst - Canalys
Christophe Demagny, EMEA Senior Security Presales Consultant - HP Inc.
Daniel Bounds, Senior Director for Data Center Products - AMD
David Hazard, Vice President, Head of Channel and Sales Operations EMEIA Product Business - Fujitsu
HP Inc. AMD Fujitsu Channel partners GDPR is coming into force next May that changes the way sensitive customer data is collected, stored and processed. Failure to comply could result in in having to provide access and audit rights to regulators, being subject to administrative orders that ban trading, and paying fines of up to 4% of annual global turnover. Large businesses in various verticals are well informed, and have dedicated resources to ensure compliance. However, smaller businesses are delaying adoption of compliant measures and many will not be ready in time. In a recent Candefero survey of EMEA partners, over 45% of respondent highlighted their customers are not yet invested in new systems to prepare for GDPR, but expect to in 2018. It not only affects customers, but also channel partners that handle their customer’s data.
So, in our discussion we aim to provide the channel audience with a clear understanding of the opportunities and implications of GDPR, not just for your customers but also your own business, with recommendations on how to approach it. Please submit your questions to the Canalys App ‘live Q&A’ tool
We expect the session may cover the following, but look forward to our delegates input to shaping the discussion:
How can partners drive awareness of the pressing need to assess GDPR requirements and compliance among customers? Who should we be engaging with smaller business? Where have others had success? Should we hire dedicated lawyers internally? How can we prove our credibility to gain trust with customers and advise them on their GDPR requirements? How important is it for channel partners to work with specialist GDPR law firms or firms with specialist GDPR practices? Should we partner with them? Where should we be focused initially? People, processes or technology? What is the most critical aspect of becoming GDPR compliant? What tool sets should we be developing? Training programs, data discovery, data privacy audit and risk assessment. Are there any pre-designed best in class practices that we should be using?