In a recent webinar, Microsoft MVP and MCM Paolo Pialorsi talked about the main requirements of new General Data Protection Regulation (GDPR), from an Office 365 perspective. In part two of our GDPR webinar series, “Myth-busting GDPR”, join Microsoft MVP, Data Security expert and serial author Nicki Borell to learn how specific Office 365 and Azure features refer to actual paragraphs and requirements of GDPR. Get a detailed understanding of what Office 365 and Azure bring to the table to help you become GDPR compliant and where your organization has to fill the gaps with other tools and solutions. Get ready for the May 25, 2018, deadline, the day European businesses and all worldwide businesses that are trading partners of European businesses will have to adhere to the GDPR, in time.

1. w: rencore.com | e: info@rencore.com | t: @rencore
Manage Customization Risk and
Save on Maintenance Costs!
Customization governance, transformation
and risk prevention for SharePoint & Office365
Myth-busting EU GDPR
In Office 365
January 25th, 2018

2. rencore.com
Q&A
Please use the Q&A functionality in
Zoom instead of chat.
We will pick up some questions at the
end and answer the others in the
follow-up email.
FAQ:
Recording of this webinar?
Yes, the session is recorded and you will
get the recording later today.

3. rencore.com
Our Guest:
Matthias Seidel
Head of Marketing at Rencore
Your Host:
Nicki Borell
Microsoft MVP
Consultant & Hypnotist
Office 365 & Azure

4. Myth-busting GDPR
in Office 365 &
Azure

5. TARGET AUDIENCE
PROCESS OWNER
DATA PROTECTION OFFICERDECISION MAKER
ADMIN / ARCHITECTS

6. TOPICS
Legal aspects
Requirements in
the context of
Office 365 & Azure
Data protection
impact assessment
how to get started
Mythbusting…

9. Chapter 1: General
Provisions
Chapter 2: Principles
Chapter 3: Rights of
the Data Subject
Chapter 4: Controller
and Processor
Chapter 5: Transfer of
personal data to third
countries of
international
organizations
Chapter 6:
Independent
Supervisory
Authorities
Chapter 7: Co-
operation and
Consistency
Chapter 8: Remedies,
Liability, and
Sanctions
Chapter 9: Provisions
relating to specific
data processing
situations
Chapter 10: Delegated
Acts and
Implementing Acts
Chapter 11: Final
provisions
https://www.eugdpr.org/article-summaries.html

10. Chapter 1: General
Provisions
Chapter 2: Principles
Chapter 3: Rights of
the Data Subject
Chapter 4: Controller
and Processor
Chapter 5: Transfer of
personal data to third
countries of
international
organizations
Chapter 6:
Independent
Supervisory
Authorities
Chapter 7: Co-
operation and
Consistency
Chapter 8: Remedies,
Liability, and
Sanctions
Chapter 9: Provisions
relating to specific
data processing
situations
Chapter 10: Delegated
Acts and
Implementing Acts
Chapter 11: Final
provisions
https://www.eugdpr.org/article-summaries.html

11. Source:
http://www.sharepointtalk.net/2017/11/mic
rosoft-compliance-manager-
framework.html

12. Chapter 1: General
Provisions
Chapter 2: Principles
Chapter 3: Rights of the
Data Subject
Chapter 4: Controller
and Processor
Chapter 5: Transfer of
personal data to third
countries of
international
organizations
Chapter 6: Independent
Supervisory Authorities
Chapter 7: Co-
operation and
Consistency
Chapter 8: Remedies,
Liability, and Sanctions
Chapter 9: Provisions
relating to specific data
processing situations
Chapter 10: Delegated
Acts and Implementing
Acts
Chapter 11: Final
provisions

13. Chapter 1: General
Provisions
Chapter 2: Principles
Chapter 3: Rights of
the Data Subject
Chapter 4: Controller
and Processor
Chapter 5: Transfer of
personal data to third
countries of
international
organizations

15. ▪
▪ personal data
▪
▪
▪

16. ▪
▪
▪
▪
▪
▪
▪
▪
▪
▪
▪

19. ▪
▪
▪

20. Microsoft Azure Information
Protection Scanner

21. Source: https://alberthoitingh.com/2017/10/19/azure-information-protection-scanner/

22. Source: https://alberthoitingh.com/2017/10/19/azure-information-protection-scanner/

23. Configure classification &
create labels
https://docs.microsoft.com/en-us/information-protection/deploy-use/deploy-aip-scanner

26. ▪
▪
▪

27. ▪
▪
▪
Trust Center Compliance Reports Trust Center – Microsoft Azure
▪
▪
▪ Office 365 Service Descriptions
▪ Microsoft Azure Microsoft Azure Legal Information
▪ Licensing Terms and Documentation
Licensing Terms and
Documentation

29. ▪
▪ Bestreiten der Richtigkeit
▪ Einschränkungsverlangen
▪ Geltendmachung, Ausübung oder Verteidigung von
Rechtsansprüchen
▪ Widerspruch
▪
▪
▪ Labels in Azure Information Protection
▪ Retention policies in Office 365
▪
▪ Exporting content to the Office 365 Security & Compliance Center
▪ Options for downloading data from Office 365

30. ▪
▪
▪ Zweckfortfall
▪ Widerruf der Einwilligung
▪ Widerspruch
▪ Unrechtmäßige Verarbeitung
▪ Erfüllung einer rechtlichen Verpflichtung
▪ Daten von Minderjährigen
Licensing Terms and Documentation

31. Those hoping that the right to be forgotten will allow them to clear their credit history or uncomely moments on
Facebook etc. are going to be disappointed

32. Those hoping that the right to be forgotten will allow them to clear their credit history or uncomely moments on
Facebook etc. are going to be disappointed
Source:
http://ec.europa.eu/justice/data-
protection/files/factsheets/factsheet_rtbf_mythbusting_en.pdf
http://ec.europa.eu/justice/data-
protection/files/factsheets/factsheet_mythbusting_2012_en.pdf

35. ▪
▪ DLP Policies
▪ Microsoft Azure Information Protection
▪
▪
▪ Exporting content to the Office 365 Security & Compliance Center
▪ Options for downloading data from Office 365

36. ▪
▪ Reports in Office 365
▪ Free Office
365 Reporting Tool
▪

37. http://demo.admindroid.com/
&
Office 365 Reports

39. ▪
Sicherheit der Verarbeitung
▪
Meldung eines Datenschutzvorfalls an die Aufsichtsbehörde
▪
Benachrichtigung der betroffenen Person(en) eines Datenschutzvorfalls
▪
▪
▪
▪

40. ▪
▪
▪
▪
▪
▪
▪ Enterprise Mobility & Security
▪ Microsoft 365 Business Microsoft 365 Enterprise
▪
▪ Advanced Threat Analytics
▪ Customer Lockbox

45. ▪
▪ Richtigkeit und Qualität
▪ Unversehrtheit und Aktualität der Daten
▪
▪ Kein Dritter darf unbefugt Kenntnis oder Zugriff auf
personenbezogene Daten erhalten
▪ Informationssicherheit
▪ Aufbewahrungs- und Weitergabebeschränkungen
▪
▪ Welche Daten wurden wofür erhoben und verarbeitet?
▪ Welche Techniken und Prozesse werden hierfür genutzt?
▪ Wer ist jeweils verantwortlich?
Trust Center Compliance Reports Trust Center –
Microsoft Azure Customer Lockbox

47. 1.
2.
3.
4.

48. Compliance Manger

49. Source: http://www.sharepointtalk.net/2017/11/microsoft-compliance-manager-framework.html

50. ▪ Compliance Manager in Office 365
▪ GDPR Assessment Tools
▪ Microsoft GDPR Assessment
▪ Microsoft GDPR Detailed Assessment
▪ Office 365 Secure Score
▪ Microsoft Partner Resources Overview
▪
https://www.lda.bayern.de/media/dsgvo_fragebogen.pdf

51. Governance and Risk Prevention for SharePoint
AnalysisCloud brings governance and risk prevention to
SharePoint Online customizations.
AnalysisCloud:
• Discovers all customizations live in your SharePoint Online
• Analyzes customizations for potential and actual threats and
violations
• Continuously tracks and monitors existing and new
customizations
Learn more about AnalysisCloud:
https://try.rencore.cloud
rencore.com

52. rencore.com
Questions & Answers
Feel free to post your questions in the Q&A section

53. What does it mean to migrate
from SharePoint to Office 365?
February 22nd, 2018, 16:00 CEST
Speakers:
Benjamin Niaulin
Microsoft MVP at ShareGate
Erwin van Hunen
Microsoft MVP at Rencore
Coming up next:

54. rencore.com
Thank you for attending!
The webinar recording will be sent to you later today.