CISM Certification Domain 1: Information Security Governance Video Boot Camp 2019 - GDPR (General Data Protection Regula

The video tutorial explains the General Data Protection Regulation (GDPR) enacted in 2018, highlighting its comprehensive approach to data protection and privacy in the EU and EEA. It contrasts the EU's proactive stance with the US's reactive approach. The tutorial covers the scope of GDPR, emphasizing that it applies based on customer location, not company location. It details potential fines for non-compliance, the importance of consent for data processing, and the rights of individuals, such as the right to be forgotten and data portability. The video also outlines the requirement for breach notifications within 72 hours and the necessity of appointing a data protection officer for companies involved in data processing.

What is the significance of the GDPR in relation to data protection for individuals in the EU?

How does the GDPR differ in its approach to data protection compared to US regulations?

What are the potential fines a company could face for violating the GDPR?

What rights do individuals have under the GDPR regarding their personal data?

What responsibilities do companies have in terms of data breach notifications under the GDPR?