The AIIM Blog
Keep your finger on the pulse of Intelligent Information Management with industry news, trends, and best practices.
Compliance | GDPR | Privacy
As a direct response to the Snowden revelations relating to the bulk collection of personal data by US intelligence the European Commission and the US Department of Commerce jointly developed a new framework purporting to considerably strengthen the protection of privacy rights of EU citizen data when such data is transferred to US data processors and controllers. The previous regime under the Safe Harbor was invalidated by the European Court of Justice in Schrems v. Data Protection Authority, which held that EU citizen’s privacy rights are at risk given the broad overreach by US public authorities.
Share
Compliance | GDPR | Privacy
The General Data Protection Regulation (GDPR), which was ratified in 2016 and will be enforced in May 2018, requires companies to meet higher standards for the protection of personally identifiable information. As the deadline gets closer, many US corporations are wondering how GDPR will impact them.
Share
Making an ECM implementation successful requires planning and attention to detail. The best way to create the right solution is to identify organizational goals and priorities. Learn how to manage a successful implementation in our free guide.
Compliance | GDPR | Privacy
May 2018 is just around the corner, and there is a mad scramble to figure out what to do about GDPR. Here are the three Keys to Your GDPR Compliance Strategy.
Share
Compliance | Information Security | Privacy
The disclosures this week from Yahoo, about government access to private emails, have fueled another round of discussions about the role of privacy and security in an internet/social age. One of the issues that I think is not fully understood about this issue – especially in the U.S. – is the fundamentally different perspectives about privacy that exist in Europe, and how those differences then manifest themselves into policy.
Share
Compliance | Information Governance
The best time to get serious about information governance is yesterday. The second best time is now. For years we have been accumulating information in various forms from paper to electronic documents and social media content such as blog posts and tweets. Many organizations think that they have to keep all of this information. What they fail to realize is that not all information is equal. By keeping information that isn’t needed and not following an information governance plan, organizations put themselves in jeopardy. Proper information governance includes getting rid of information that no longer has any value to the organization. Simply put: you don’t need to keep it all – and you shouldn’t. The more information your organization accumulates, the more risk it generates. This combined with cascading changes in legal requirements means that organizations need to get serious about information governance. Here are three reasons why:
Share
Cloud | Compliance | Privacy
Data Protection laws and regulations across the EU govern the storage and processing of data that would allow an individual to be recognized. They are intended to address the risks around privacy and data loss and to provide a framework for good information governance. The development of public, private, government, and hybrid cloud computing services has created a challenge to on-premise data storage and processing, and thus created uncertainty regarding responsibilities of the respective organizations regarding data protection and data privacy. The European Union is soon to implement the General Data Protection Regulation (GDPR), which will bring all 27 countries under a single regime of rules, and penalties for breach. AIIM regards this as an opportunity for cloud providers to deliver EU-wide services under a single operations model. However, providers and users need to be aware of the current legislative challenges. The purpose of a new AIIM white paper -- Making sense of European Data Protection Regulations as they relate to the storage and management of content in the Cloud – is to inform end-users of the current and potential future legislative landscape in Europe regarding data protection and data privacy. This will enable end-user organizations to make risk-based decisions about cloud versus on-premise content storage. This will also allow them to evaluate providers of cloud services to ensure that they will stay compliant with applicable law.
Share