Understanding the Impacts of theGeneral Data Protection Regulation(GDPR) and How to Minimize Risk

The GDPR deadline is rapidlyapproaching. Are you prepared?
Compliance with the GDPR across Europe will become mandatory
on 25 May 2018, bringing with it a wide range of new challenges forbusinesses. In brief, the fundamentals of the regulation are:Organizations must formulate necessary policies and procedures toensure the ongoing security and portability of PII.
The GDPR also specifies that all systems and processes must
employ a privacy-by-design approach.
At Intralinks, we believe that most organizations can meet thespirit of the GDPR within their company boundaries. However, the1. It applies to every business globally that holds personallyidentifiable information (PII) of a European citizen.

nature of business is changing and content in motion presents a

2. European citizens are at the heart of the regulation, and all
the requirements center around protecting them.

mitigating that business risk.

3. It provides a set of principles to which organizations must
adhere, BUT local regulators will be keen to see not justadherence to the rules but also engagement with the spirit of
the regulation.

content within highly regulated industries, and has a significant

4. Fines for non-compliance have been set at up to four percent
of an organization’s total annual global turnover, or EUR 20
million, whichever is greater.
5. Local supervisory bodies must be informed of personal data
breaches without undue delay and, where feasible, not later
than 72 hours after having become aware of it, and data
subjects must be informed of personal data breaches without
undue delay.
6. Data controllers and data processors are to be held jointly
liable for data loss incidents.
7. Encryption is specifically highlighted as a technology that canmitigate the risk of data loss.
The purpose of the GDPR is to protect European citizens throughnew infosecurity requirements. Organizations that deal with PII

fundamental business risk; we are well placed to support you in

Intralinks has a long history of securing and enabling high-value
portfolio of capabilities to help customers minimize their risks underchallenging regulations, including the GDPR.
Intralinks Security and Governance can provide the following:• Customer-managed encryption keys (CMK) ensure total
control over access to your content.
• Information rights management (IRM) provides granular,
lifetime control over individual pieces of content.
• Physical geolocation capabilities provide in-region processing
and archive creation functionality, so information stored in one
region is never passed to another.
• Legal avenues for international transfer of personal data using
model contracts enable you to send PII to countries outside
the European economic area that have not been deemed
adequate by the European Commission. Intralinks is certified
under the EU-US Privacy Shield and is applying for approvalof binding corporate rules.

of European citizens must design their systems to ensure all
information is acquired with consent for use, and must store thedata in systems that meet GDPR security requirements.
1Intralinks is already widely used to support the following use cases:

Vendor-risk management and thirdparty oversightCompliance management systems

The management of vendors and lines of business towith granular operational controls and information

comply with regulatory requirements and safeguardManage enterprise-wide compliance information
security for working with both internal and externalcustomers and stakeholders continues to present

stakeholders. Use Intralinks to:challenges. Intralinks can help by:• Provide evidence of the who, what and when of
document preparation, review and distribution• Securing the flow of confidential information andPII• Monitoring and enforcing compliance with
contractual terms• Maintain a single gold copy of compliancemanuals, policies and procedures that isaccessible to internal and external parties

Risk and compliance data governanceRegulatory filings

The global financial crisis highlighted the need for readily

Aggregate, refine and formally submit regulatory

available, enterprise-wide risk and compliance data,

information from disparate organizational structures

which regulators expect to be complete, accurate andand information types. Intralinks enables you to:timely. Intralinks provides:• Secure information prior to making it publicly
available• A single global platform that overcomes geographic,
business unit and IT boundaries• Enterprise-grade information security for sharing themost sensitive supervisory information with regulatorsand other parties• Streamline operations to meet submission
deadlines• Improve accountability throughout the filingpreparation and submission process

99% of the Fortune 1000 have trusted Intralinks with
their most valuable data. You can, too.

What are the 5 steps every organization should taketo become GDPR-compliant? Find out here
310507 NT© 2018 Intralinks, Inc. To learn more about Intralinks® and its trademarks please visit intralinks.com/about-us