The Impact of GDPR on Access Control and Data Security

This report explores the crucial role of access control within the framework of the General Data Protection Regulation (GDPR). It begins with a definition of GDPR and its primary objective: empowering individuals to control their personal data and simplifying the regulatory environment for businesses in the European Union. The report details GDPR compliance requirements, emphasizing the protection of personal data including names, addresses, photos, and IP addresses. It outlines a four-step methodology for ensuring security measures are aligned with GDPR compliance. The report examines the impact of GDPR on various companies, particularly those that handle large volumes of customer data. It concludes by highlighting the importance of proactive measures for GDPR compliance, including the creation of efficient data governance frameworks, specialized personnel, and regular audits. This analysis underscores the necessity for organizations to embrace compliance to mitigate potential challenges. The paper provides insights into the importance of access control in the digital age.

Running head: ACCESS CONTROL 0
Importance of Access Control: Discussion on General Data Protection Regulation (GDPR)
Author Name(s), First M. Last, Omit Titles and Degrees
Institutional Affiliation(s)
Author Note

ACCESS CONTROL 1
Abstract
For protecting the data of Europe and for data revolution, there is introduction of two regulating
documents: one is General Data Protection Regulation (GDPR) and the other is ePrivacy
Directive (ePD) which is commonly known as Cookie Law.
The GDPR is mainly designed that enables the individuals for controlling the personal data in a
better way and it includes modernized as well as unified rules that allows businesses for making
most opportunities to make a digital market. The GDPR helps to reduce regulations and benefits
the customer trust.
Keywords: European Government, compliance, security measures, Impact of GDPR.

ACCESS CONTROL 2
Importance of Access Control: Discussion on General Data Protection Regulation (GDPR)
In the year 2012, European government has planned some reform of data protection
across the country for making Europe fit for digital age. After four years of reform, the
agreement was agreed and the way was given about how to enforce it (Goddard, 2017). From
those components, one such component was GDPR (General Data Protection Regulation). This
particular framework was applied to all the organizations in all states and GDPR had
implications on the business and the individuals all over Europe and even beyond Europe.
Literature Review
Definition of GDPR
A new set of rules and regulation designed by government of Europe for providing the
citizens of Europe to have more control over the personal data (European Union, 2016). The
main aim of GDPR is to simplify regulatory environment for the business so that both the
citizens as well as the businesses in European Union can be benefitted from digital economy
(Krystlik, 2017).
GDPR Compliance
Under the compliance of GDPR, the organizations as well as the individuals who collects
data will have to ensure the personal data gathered is done legally and are done under strict
protection. They will also have to ensure that the data is not misused or is exploited (Tankard,
2016). The personal data that comes under compliance of GDPR that is to be protected is name,
address, photos, IP address, and personal data including generic data and the biometric data of an
individual.

ACCESS CONTROL 3
Discussion
Security Measures of GDPR
GDPR includes a four-step methodology for ensuring that the security measure of an
organization works with GDPR compliance of data security. The four-step methodology states
that firstly the organization or an individual should know the data. Secondly, they should be able
to access the current state of the data (Green, 2017). Thirdly, a program should be built
accordingly and the last step of four-step methodology is to test data, operate them, and manage
them.
Impact of GDPR regulation
The effect of GDPR is on every company, but the companies that will be more effected
are those who deals with large number of customer data that is the technological firms, the data
brokers, and the marketers (Murphy, 2018). The forms will be impacted more who has business
models relying on the acquiring the customer data and exploiting the customer data at scale.
Conclusion and Future Study
Conclusion
GDPR focuses on personal data and helps the user to protect their data. GDPR provides
privacy to the data. All the resident of Europe have right to manage their data and secure the data
that are collected, used, stored, transferred, or deleted. Under the rule of GDPR, an individual
have the right to not share their personal data or can even forbid the data from being used
anymore and can delete them permanently from a system.
Future Study
In future, the GDPR act needs to be stricter about handling the data involved in it. There
are many large organizations that makes full review of the data that are collected, security

ACCESS CONTROL 4
practices, and the usage of data. This might help the organization to create a framework of data
governance that is efficient, employ personnel who are specialized, organize staffs for training
and developing professionals, perform audits, and ensure that the member of a team has clear
understanding about the principle and the requirements of GDPR involved in the company. All
the companies needs to take a step forward toward compliance facing all the challenges that
might come on their way.

ACCESS CONTROL 5
References
European Union. (2016). Key Changes with the General Data Protection Regulation.
https://doi.org/10.1016/j.ympev.2010.02.020
Goddard, M. (2017). The EU General Data Protection Regulation (GDPR): European regulation
that has a global impact. International Journal of Market Research.
https://doi.org/10.2501/IJMR-2017-050
Green, A. (2017). Ransomware and the GDPR. Network Security. https://doi.org/10.1016/S1353-
4858(17)30030-2
Krystlik, J. (2017). With GDPR, preparation is everything. Computer Fraud and Security.
https://doi.org/10.1016/S1361-3723(17)30050-7
Murphy, J. F. A. (2018). The General Data Protection Regulation (GDPR). Irish Medical
Journal. https://doi.org/10.1007/978-3-319-57959-7
Tankard, C. (2016). What the GDPR means for businesses. Network Security.
https://doi.org/10.1016/S1353-4858(16)30056-3