A federated budget for the General Data Protection Regulation

Abstract

Reading the new Data Economy package is vital to understanding the challenges of implementating the General Data Protection Regulation (GDPR). Privacy colleagues often find it hard to view personal data in commercial terms. A digital economy, however, will require of them the ability to discern which data types can be owned and freely traded, and which data types can never be legally owned, but only handled through the data protection imperatives of the GDPR. A federated budget is an exercise in shared responsibility and quantification of the changes needed by each business function or business unit to tackle this challenge. Clear examples help understand the difference between incrementing a portion of budget and reorienting existing budget amounts towards the GDPR goals.