Solution Flyer

Voltage Powers Data Privacy (GDPR)
Organizations must balance compliance with business objectives tocomply with global privacy regulations. Advanced privacy-enabling
technologies can help turn privacy into a catalyst for growth.
Voltage Data Privacy andProtection at a GlancePrivacy Compliance
Ensure that you can uncover sensitive andpersonally identifiable information.

Advanced Privacy-Enhancing Technology
Take protective action on data during
discovery to power faster decision-making
and establish data trust.

Drive More Business Outcomes
Beyond privacy compliance, Voltage
technology powers data minimization,secure cloud analytics, information lifecycle
management, greener IT and sustainability.

The General Data Privacy Regulation
The General Data Protection Regulation(GDPR) is a comprehensive data protection
law introduced in the European Union(EU) in 2018. It replaces the previous
EU data protection directive and aims togive individuals greater control over theirpersonal data and how organizations use it.
The regulation applies to any organizationthat processes the personal data ofindividuals in the EU, regardless of wherethe organization is based. In addition,companies operating outside the EU mustalso comply with the GDPR if they process
the personal data of EU citizens.
The GDPR sets out a range of rights forindividuals, including the right to accesstheir personal data, the right to have theirdata deleted, and the right to have theirdata transferred to another organization.
It also imposes strict obligations onorganizations that handle personal data,such as obtaining explicit consent fromindividuals before collecting their dataand ensuring that data is secure andprotected from unauthorized access.
In addition to these requirements, the GDPR
also includes penalties for organizations thatbreach the regulation, with fines of up to 4%of an organization’s annual global turnoveror 20 million euros (whichever is greater).
The GDPR has set a new standard for dataprotection and privacy in the EU and has
influenced similar privacy laws worldwide.
It is considered a significant milestone indeveloping data protection law and serves
as an example of how organizations can beheld accountable for handling personal data.

Right toDelete

Business
Purpose

Data
Minimization

Data Securityand Protection

Data
Portability

Article 17

Article 6Article 5 (1)(c)

Article 5(f), 6, 32, 34,
Recitals 39, 83

Article 20

Voltage Powers Data Privacy (GDPR)

Advanced Privacy-Enabling
Technology from Voltage

The General Data Protection Regulation(GDPR) provides a framework for how
organizations can establish their privacy
programs and practices to comply withregulations and reduce risk. Voltage Fusion
by OpenText™ delivers advanced privacyenabling and privacy-preserving technologies
to augment these programs. Voltage helps
customers drive compliance while ensuringthat the data can be securely and ethicallyshared across the business. Voltage also
helps drive cost containment; data retention
and disposition; and Environmental, Social,and Governance mandates such as reduced
power consumption, sustainability, andGreen-IT.
Voltage Privacy-Enhancing andPrivacy-Preserving Technologies
Privacy-enhancing technology (PET) refers
to technologies designed to improve privacy
by reducing the amount of personal datacollected and shared. These technologies
include PII detection, de-identification,anonymization, and data minimization
techniques. The goal of PET is to reduce therisk of personal data being used or misusedin ways that could harm the user if nothandled ethically.
Privacy-preserving technology (PPT) refers toa subset of Privacy-enhancing technologies
that offers a variety of techniques and tools
designed to protect the privacy of individuals
and organizations when they share, collect, or
personally process data. These technologies
are used in various contexts, including
consumer privacy, data analytics, and data
lifecycle management. The goal of PPT
is to ensure that personal data remains
secure and cannot be accessed or used byunauthorized parties.

Privacy-preserving technology include:• Encryption: Preserves data fromunauthorized use/ access or being ableto see the data in clear text.
• Masking/ Anonymization: Preserves
data by removing personally identifiable
information (PII) from data sets, making it
difficult to trace the data back to specificindividuals.
• Tokenization: Preserves data by replacing
sensitive data with a unique, reversible
token that can be used to represent thedata but cannot be used to reveal the data
itself without the presence of the token.
• Pseudonymization: Preserves data byreplacing PII with a pseudonym, or fake
name, that cannot be traced back to theindividual.
• Data minimization: Preserves data bycollecting and storing only the minimum
amount necessary to achieve a specificpurpose, reducing the risk of data misuseor abuse.
• Data access monitoring and controls:
Preserves privacy by ensuring thatunauthorized parties cannot access or
use personal data.
These privacy-preserving technologies are
critical to business operations. They enableorganizations to balance the collection
and use of customer data and meet their
obligation to protect individuals’ personal
information from being accessed, used,or shared without their consent.

Voltage Fusion Helps Organizations
with the Following:
The Right to Delete—Article 17
Voltage Fusion’s data discovery capabilities
help organizations understand the value of
their data and how they can apply retention
and disposition policies on high-value datain-use to lessen the disruption of subject
rights requests. For example, in cases where

the right to delete is requested and valid,
Voltage Fusion can delete that data from thesource location or lead application.
Business Purpose—Article 6
Voltage Fusion capabilities provide insightand analysis around sensitive data. They candynamically tag data with categories that map
to regulations, specifically around the rightto process customer and consumer data.
Data Minimization—Article 5 (1)(c)During data discovery processes, legacy,duplicate, and low- to no-value data canbe remediated. In addition, customers
can archive and retire application data forcompliance purposes and delete redundant,
out-of-date, and trivial unstructured data at
the source.
Data Security and Protection—
Articles 5(f), 6, 32, 34, and Recitals 39 & 83
Acting on data that is responsive andrelevant to data privacy regulations is a“game changer” for organizations looking
to have technology assist them in achieving
privacy compliance. Voltage supports amyriad of protective actions on data that canprotect consumer information and support
broader corporate objectives.
Voltage can:• Encrypt data at the source or leverage
workloads in cloud data warehouses
and analytics platforms. In the event of abreach, this can protect your organizationfrom sanctions and fines.
• Protect the identity and personal
information via dynamic data masking
while in use by the business.
• Apply information lifecycle policies todata to ensure proper business use andthat data deletion requirements aremet automatically.

2Voltage Powers Data Privacy (GDPR)

Data Portability—Article 20
If a data portability request is made andis valid, Voltage Fusion can produce adata subject’s information in a structured,commonly used, and machine-readable format.

Privacy Compliance and Data Trust
Support Downstream Corporate
Objectives and Growth Drivers

As organizations embark on the journey toprivacy management and privacy compliance,
Voltage privacy-enhancing technology
helps them prepare to comply with global
regulations and support their existing
privacy processes and practices. Moreover,Voltage helps build data trust to support
many different business outcomes that drive
business growth, operational efficiency,and sustainability.
Sustainability
Many organizations have taken on corporate
objectives to support greater sustainability,
reduce their carbon footprint, and operate
an increasingly green business. “Green”
Voltage technologies help organizations
achieve these mandates by reducing thestorage, power consumption, and operationalcosts associated with managing legacy data.
In addition, data minimization efforts andarchiving and cloud migration capabilities
drive the business towards lower costs,
reduced data and application sprawl, andstreamlined operational expenses.
Data Protection
As information is continuously protected byVoltage, the unintended consequences ofaccidental exposure or an actual data breachcan be mitigated through encryption andtokenization. In addition, sensitive information
is protected from exposure if the data issubject to a breach. At the same time, dataprotected by Voltage can be leveraged
by data analysts and business users in
its protected state to derive value for thebusiness. For example, business intelligenceand cloud analytics tools can manipulate thedata to look for ways to grow the businesswhile maintaining the data’s referentialintegrity. This enables business users
to source analytics workloads ethically,
while still ensuring that data analysts canleverage insights and trends.

Financial Risk
Understanding the risk exposure aroundsensitive data should go beyond simple
risk scoring. For example, Voltage provides
visibility into the financial risk of managing
and protecting large data estates byvisualizing the economic impact of managing
and protecting data. This data can be used
to better estimate cyber insurance premiums,while monitoring data protection activities.
Secure Cloud Analytics
Voltage data-centric security integrates withdata analytics platforms such as Google
BigQuery, Amazon Redshift, Azure Synapse,
Snowflake, Cloudera, and Teradata. Voltage
enables high-scale secure analytics and data
science in the cloud and on-premises using
format-preserved tokenized data, mitigating
the risk of data exposure while enabling
privacy compliance.
Defensible Disposition
Data privacy requirements for data deletionand the right to be forgotten can be disruptive
to IT and content owners. Having data
lifecycle policies applied to business-critical
data (mapped to its business purpose)can reduce the impact of these requests.
In addition, automating defensible disposition
based on policy further streamlines thisprocess, ensuring compliance and driving
down the cost of managing data.
Data Minimization
Keeping what you need and ensuring thatwhat is preserved is protected and has abusiness purpose is a core principle of data
minimization. On collection, Voltage can helporganizations ethically process consumer dataand protect it while in use. For legacy data,
Voltage Fusion can drive cost efficiencies andreduce the threat landscape. By removing
duplicate data and data that serves zero
value to the business data discovery, you canreduce the overall storage footprint and3

Connect with Us
www.opentext.com

application sprawl, while reducing thepersonnel required to manage data andthe lead application or database.
ISO 27701
ISO 27701 is a data privacy extension of ISO
27001 (Information Security ManagementSystem). Voltage Fusion, hosting andinfrastructure services are certified to support
the ISO 27001 risk-based approach for
implementing security controls around people,
processes & technology. Voltage Fusion
capabilities drive compliance and support
privacy management mandates coveredin ISO 27701, including privacy impact
assessments, ethical records of processing,data minimization, deletion requests, data
portability, and data protection.
Summary
Voltage Fusion provides privacy-enhancing
technology within a data trust frameworkfor data discovery and protection. Voltage
enables organizations to reduce information
risk, ensure data privacy, and secure
quick access to critical data that drives thebusiness. Voltage provides data protection
and preservation and mitigates the risk ofprocessing sensitive data while supporting
other corporate initiatives that drive
business growth, operational efficiency,and sustainability.

OpenText Cybersecurity provides comprehensive security solutions for companies and partners of all sizes. From prevention, detection and response to recovery, investigation and compliance,
our unified end-to-end platform helps customers build cyber resilience via a holistic security portfolio. Powered by actionable insights from our real-time and contextual threat intelligence,
OpenText Cybersecurity customers benefit from high efficacy products, a compliant experience and simplified security to help manage business risk.
761-000082-005 | O | 10/23 | © 2023 Open Text