Introduction

An information revolution is taking place in the data-driven world around us, where technologists are creating, collecting, and analysing vast amounts of data about people, their locations, goods, or services. We urgently need to include key ideas and tenets in our already established data management rules. The General Data Protection Regulation (GDPR) has been implemented throughout the European Union as of May 25, 2018, in order to address the major issues.

Data governance, data processing activities, and data compliance (who owns it, uses it, and how it's secured) must all be defined in a world transformed by data. Every company that gathers uses, or maintains personal data should therefore take precautions to ensure compliance.

The GDPR replaces the several national data protection regulations already in existence with a unified set of guidelines in order to meet the demands of the digital age. By consolidating data protection rules and procedures across the EU, the new regulation intends to give people stronger, more consistent rights to access and control their personal information.

Our Commitment to Compliance

No matter where they are situated, businesses who give goods and services to inhabitants of the European Union (EU), collect and analyse data related to EU citizens, or offer products and services to EU residents are subject to new regulations under the GDPR.

When preparing for GDPR, Spherical Insights concentrates on the following aspects:

• Enhancing privacy rights with existing security and business continuity management policies, processes, and controls to assure compliance.
• Greater responsibility for data protection, the creation of compliance procedures, and the construction of a more secure platform for the customers by taking ownership of their data and carefully examining the deployment alternatives.
• Gap and privacy assessments are carried out in support of its customers' GDPR compliance, with required breach reporting and severe fines for non-compliance.
• Offering services to assist clients in understanding and being ready for GDPR.
• We are evaluating how long we retain and preserve data while simultaneously working toward the deployment of a dedicated erasing method to comply with the new Right to Erasure duty. The business is very aware of when this and other rights of data subjects apply, as well as any exceptions, response deadlines, and notification obligations.
• We are updating all of our data contracts to comply with the new GDPR regulations.
• Educating the staff about the expanded data rights that the GDPR grants to individuals. Key changes, such the removal of posting fees for responding to topic access requests, must be made clear to all employees, whether they work in sales or security.
• Processes for registering consent are being updated so that we can demonstrate an affirmative opt-in together with time and date records, and a simple method to retract consent at any time.
• Upgrading processes and safety precautions to secure, encrypt, and keep the data's integrity, particularly with relation to third-party disclosures & international data transfers.

More importantly, consumers must also modify their business procedures, data management techniques, and integrations because compliance is a shared obligation between the corporation and its customers. Our team works tirelessly to give their clients the option to choose who can access what data inside each domain or branch. By doing this, access or use that is not appropriate is protected. By preserving rights, title, and interest in data recorded through the system, we make sure that our clients are the only true owners of the information. The business takes the necessary steps to ensure that its clients can satisfy their GDPR requirements regarding the erasure, rectification, transfer, access, and objection to processing of personal data by utilising the built-in capabilities of the service.

Our Strategies

Our business takes every precaution and measure that is appropriate to safeguard and protect the personal data that we process. We have numerous layers of security protections in place as well as strong information security policies and processes to guard against the alteration, unauthorised access, disclosure, or destruction of personal data. Employee education, data encryption in storage and transit, password policies, one-time password and two-factor authentication systems, as well as other technical and organisational preventive, detection, and rectification procedures, are a few examples of these methods.

Our GDPR Journey Starts with Small Steps

We have established a data privacy team to create and implement a plan for complying with the new data protection Regulation in order to maintain a uniform level of data protection and security across our business. The group is in charge of raising GDPR awareness, assessing our enthusiasm for the regulation, finding any loopholes, and consistently putting new rules, processes, and safeguards into place. Our employee training program, which is tailored to our core business operations and is implemented through our induction and annual training program, now includes a GDPR training program.