Simplified GDPR compliance for any size business

You must comply with GDPR if your company or entity:

1. Processes personal data as part of the activities of one of its branches established in the EU, regardless of where the data is processed.
2. Was established outside the EU and is offering goods and/or services (paid or for free), or is monitoring the behavior of individuals in the EU.

If processing personal data isn’t a core part of your business—and your business activity doesn't create risks for individuals—then some obligations of GDPR won’t apply to you.

GDPR compliance for US companies includes:

• Conducting an information audit for EU personal data
• Informing customers why your company is processing their data
• Assessing your company’s data processing activities and improving protection
• Ensuring you have a data processing agreement with your vendors
• Appointing a data protection officer (if necessary)
• Designating a representative in the European Union
• Knowing what to do if there is a data breach
• Complying with cross-border transfer laws (if applicable)

Following these steps can help your organization avoid drawing scrutiny from EU regulatory authorities, but complying with all requirements can be daunting. That’s where we come in…

Strike Graph can help you demonstrate GDPR compliance by guiding your organization as it designs, sets up, manages, and continually improves how it handles consumer personal data per GDPR requirements. Our platform will ensure your organization meets all seven GDPR protection and accountability principles, which include:

1. Lawfulness, fairness, and transparency
2. Purpose limitation
3. Data minimization
4. Accuracy
5. Storage limitation
6. Integrity and confidentiality
7. Accountability