--- title: How the GDPR has affected Organisations in the Caribbean description: Not sure if the GDPR will affect your organisation in the Caribbean? We detail how the GDPR will impact your business and steps you need to take to protect your organisation. image: https://info.cloudcarib.com/hubfs/shutterstock_526925701.jpg --- [![Cloud Carib](https://info.cloudcarib.com/hubfs/Cloud%20Carib%202018%20Template/cloud-carib-logo-white.svg)](https://www.cloudcarib.com/) +1 800 390 2806 [Client Portal](https://www.cloudcarib.com/support/)[Contact us](https://www.cloudcarib.com/contact-us) Menu - [About us](https://www.cloudcarib.com/about-us/why-cloudcarib/) - [Services](https://www.cloudcarib.com/services/) - [Data Centre Services](https://www.cloudcarib.com/services/data-centre-services/cloud-facilities/) - [Cloud Facilities](https://www.cloudcarib.com/services/data-centre-services/cloud-facilities/) - [Virtual Data Centre](https://www.cloudcarib.com/services/data-centre-services/virtual-data-centre/) - [Managed Services](https://www.cloudcarib.com/services/data-centre-services/managed-services/) - [Network Services](https://www.cloudcarib.com/services/data-centre-services/network-services/) - [Managed Backups](https://www.cloudcarib.com/services/data-centre-services/managed-backups/) - [Professional Services](https://www.cloudcarib.com/services/data-centre-services/professional-services/) - [Security & Business Continuity](https://www.cloudcarib.com/services/security-business-continuity/managed-security/) - [Managed Security](https://www.cloudcarib.com/services/security-business-continuity/managed-security/) - [Intrusion Detection and Prevention](https://www.cloudcarib.com/services/security-business-continuity/intrusion-detection-and-prevention/) - [Disaster Recovery](https://www.cloudcarib.com/services/security-business-continuity/disaster-recovery/) - [Mobility & Productivity](https://www.cloudcarib.com/services/mobility-productivity/enterprise-mobility-management/) - [Unified Communications](https://www.cloudcarib.com/services/mobility-productivity/unified-communications/) - [Voice Services](https://www.cloudcarib.com/services/mobility-productivity/voice-services/) - [Carib365](https://www.cloudcarib.com/services/mobility-productivity/carib365/) - [Enterprise Mobility Management](https://www.cloudcarib.com/services/mobility-productivity/enterprise-mobility-management/) - [Solutions](https://www.cloudcarib.com/solutions/) - [Resources](https://www.cloudcarib.com/resources/news-centre) - [News centre](https://www.cloudcarib.com/resources/news-centre/) - Blog - [Whitepapers](https://www.cloudcarib.com/resources/whitepapers/) - [Case studies](https://www.cloudcarib.com/resources/case-studies/) - [Tools](https://www.cloudcarib.com/resources/tools/) - [Partners](https://www.cloudcarib.com/partners/) - [Our Partner Network](https://www.cloudcarib.com/partners/) - [Become A Partner](https://www.cloudcarib.com/partners/become-a-partner/) - [Refer A Client](https://www.cloudcarib.com/partners/refer-a-client/) Blog ** # How the GDPR has affected Organisations in the Caribbean ** ![shutterstock_526925701](https://info.cloudcarib.com/hs-fs/hubfs/shutterstock_526925701.jpg?width=6000&name=shutterstock_526925701.jpg) On May 25th, 2018, the **General Data Protection Regulation (GDPR)** officially came into effect, changing the way organisations process, store, and protect European Union (EU) citizens’ data. The GDPR is the first piece of Europe-wide data privacy legislation and is the most significant piece of European data protection legislation in over 20 years. Since its implementation, the GDPR has had sweeping implications for individuals and organisations across the globe, including the Caribbean and Latin America.  While few Caribbean countries were initially aware of the implication of the new legislation, the past decade has seen widespread adoption of [data protection legislation](https://youtu.be/kxG8QMPXeMM) and regulations based on the principles outlined in the GDPR. As a result, far more businesses throughout the Caribbean have taken the necessary steps to adapt, and rightfully so. As a region, The Caribbean remains highly reliant on cross-shore business. The region functions as a hub for the global financial industry, with citizens from all over the world investing and moving their money throughout the CARICOM community. Under EU regulations, these organizations qualify as data processors and therefore fall under the purview of the GDPR. But the financial industry is not the only one impacted. Other industries such as tourism, law, real estate, and construction are also often in possession of significant amounts of EU citizens’ data. Organisations in these sectors must have plans in place to adhere to GDPR legislation, or risk being fined and penalized. The **[GDPR allows for steep penalties](https://www.csoonline.com/article/3202771/data-protection/general-data-protection-regulation-gdpr-requirements-deadlines-and-facts.html?page=2)** of up to €20 million or 4% of global annual turnover, whichever is higher, for non-compliance. Penalties this strict could severely impact a company, reinforcing the need for compliance and vigilance.   ## **GDPR Requirements **  The GDPR requires organisations with possession of EU citizen data to uphold **[strict security requirements](https://www.lexology.com/library/detail.aspx?g=1426e18d-f687-45a0-b779-4aeb362a03ac)** such as:   - Firewalls properly configured with all software updates employed  - User Access Control Management in place  - Regular software updates, and appropriate patch management   - Real-time protection anti-virus, anti-malware, anti-spyware software  - Encryption of all portable devices   - Encryption of personal data in transit by using suitable encryption solutions (IPsec VPN, SSL, suitable)   - Intrusion detection & prevention systems  **[GDPR requirements also include non-security requirements](http://www.channelfutures.com/security/security-central-essentials-complying-gdpr-s-privacy-rights?NL=NL-005&Issue=NL-005_20180507_NL-005_750&sfvc4enews=42&cl=article_3)** such as the right to be forgotten, right to opt-out, right of access, right to portability, and right to object.   Despite the progress made surrounding GDPR compliance, many organisations in the [EU](https://legaljobs.io/blog/gdpr-statistics/)[do not](https://legaljobs.io/blog/gdpr-statistics/)[meet these requirements.](https://legaljobs.io/blog/gdpr-statistics/)  In the Caribbean, these numbers are believed to be higher, and so are the risks. Organisations in the Caribbean run the risk of incurring fines and penalties and risk losing clientele as some clients will prefer to use vendors that meet these stricter regulations.  ## **How to Become GDPR Compliant**  [According to CSO](https://www.csoonline.com/article/3202771/data-protection/general-data-protection-regulation-gdpr-requirements-deadlines-and-facts.html?page=2), there are several key steps your organisation should take to become GDPR compliant:   - **Conduct a thorough risk assessment.** Ensure you understand where your data is stored and what type of information your company processes for EU citizens. You want to know which applications your organisation uses and how they each process data.   - **Involve all stakeholders in the planning and assessment process.** Create a task force that includes members from all departments.   - **Create a Data Protection Plan.** Your organisation should already have one, but it’s important to review it and ensure it aligns with GDPR requirements.   - **Implement measures to reduce risk.** Once you’ve identified the risks, take the steps to minimize these risks and ensure compliance is met.   - Create a plan to **track GDPR Compliance & Progress** and ongoing assessment.   - If your organization is small, ask for help!   As legislation around data protection and security continues to intensify, it is impossible for organisations to ignore compliance as our world becomes more connected through technology.  According to a survey conducted by Varonis, 74% of companies believe that by complying with GDPR requirements they will have a competitive advantage, as their compliance will boost consumer confidence. More importantly, the technical and process improvements necessary to meet the requirements will enable efficiencies in how they manage and secure their data, providing organisations with several favorable reasons to be GDPR compliant. Therefore, it isn’t too late to prepare for GDPR legislation, and to continue finding ways to improve business processes to protect and secure consumer data. [![Cloud Carib](https://no-cache.hubspot.com/cta/default/546812/871e7ecc-d49e-446d-8d28-dab8dbb66ce6.png)](https://cta-redirect.hubspot.com/cta/redirect/546812/871e7ecc-d49e-446d-8d28-dab8dbb66ce6) ### Posts by Topic - [Cloud Computing 36](https://info.cloudcarib.com/blog/topic/cloud-computing) - [Disaster Recovery 33](https://info.cloudcarib.com/blog/topic/disaster-recovery) - [data security 32](https://info.cloudcarib.com/blog/topic/data-security) - [Cyber Security 28](https://info.cloudcarib.com/blog/topic/cyber-security) - [Caribbean 19](https://info.cloudcarib.com/blog/topic/caribbean) - [Government 20](https://info.cloudcarib.com/blog/topic/government) - [Public Sector 19](https://info.cloudcarib.com/blog/topic/public-sector) - [Cloud Security 16](https://info.cloudcarib.com/blog/topic/cloud-security) - [Data Backup 15](https://info.cloudcarib.com/blog/topic/data-backup) - [Cloud Solutions for Legal Firms 15](https://info.cloudcarib.com/blog/topic/cloud-solutions-for-legal-firms) - [Data Sovereignty 15](https://info.cloudcarib.com/blog/topic/data-sovereignty) - [Business Continuity 14](https://info.cloudcarib.com/blog/topic/business-continuity) - [Cloud Computing for Financial Institutions 14](https://info.cloudcarib.com/blog/topic/cloud-computing-for-financial-institutions) - [Security 11](https://info.cloudcarib.com/blog/topic/security) - [Managed Cloud Services 10](https://info.cloudcarib.com/blog/topic/managed-cloud-services) - [Cloud Services 9](https://info.cloudcarib.com/blog/topic/cloud-services) - [Choosing a Cloud Service Provider 8](https://info.cloudcarib.com/blog/topic/choosing-a-cloud-service-provider) - [Hurricane Season Preparation 7](https://info.cloudcarib.com/blog/topic/hurricane-season-preparation) - [Hybrid Cloud Computing 6](https://info.cloudcarib.com/blog/topic/hybrid-cloud-computing) - [Compliance 5](https://info.cloudcarib.com/blog/topic/compliance) - [Data Economy 5](https://info.cloudcarib.com/blog/topic/data-economy) - [Small Business 5](https://info.cloudcarib.com/blog/topic/small-business) - [Business Agility 4](https://info.cloudcarib.com/blog/topic/business-agility) - [COVID-19 4](https://info.cloudcarib.com/blog/topic/covid-19) - [Cloud Computing for CEOs 4](https://info.cloudcarib.com/blog/topic/cloud-computing-for-ceos) - [Multi-Factor Authentication 4](https://info.cloudcarib.com/blog/topic/multi-factor-authentication) - [Containerization 3](https://info.cloudcarib.com/blog/topic/containerization) - [Containers 3](https://info.cloudcarib.com/blog/topic/containers) - [GDPR 2](https://info.cloudcarib.com/blog/topic/gdpr) - [MFA 2](https://info.cloudcarib.com/blog/topic/mfa) - [Data Breach 1](https://info.cloudcarib.com/blog/topic/data-breach) - [Healthcare Industry 1](https://info.cloudcarib.com/blog/topic/healthcare-industry) - [SOC2 1](https://info.cloudcarib.com/blog/topic/soc2) Show more #### Get in touch with an expert, find your nearest office location, or send us a note about your next project. [Get in touch](https://www.cloudcarib.com/contact-us/) ## Recent posts From our privately owned equipment in Nassau, and through strategic global partnerships. [View all posts](https://info.cloudcarib.com/blog/all) [![shutterstock_526925701](https://assets.bwbx.io/images/users/iqjWHBFdfxIU/iVkwvb.BrCKs/v0/-1x-1.webp)](https://info.cloudcarib.com/blog/backups-arent-recovery-plan) [Disaster Recovery](https://info.cloudcarib.com/blog/topic/disaster-recovery) ### [The Continuity Gap: Why Backups Aren't a Recovery Plan](https://info.cloudcarib.com/blog/backups-arent-recovery-plan) [![shutterstock_526925701](https://info.cloudcarib.com/hs-fs/hubfs/All%20Hands/Backup%20And%20Running/Pegasus.png?width=370&height=245&name=Pegasus.png)](https://info.cloudcarib.com/blog/from-eurostack-to-caribstack) [Government](https://info.cloudcarib.com/blog/topic/government) ### [From EuroStack to CaribStack: How the Caribbean Can Build Digital Sovereignty](https://info.cloudcarib.com/blog/from-eurostack-to-caribstack) [![shutterstock_526925701](https://info.cloudcarib.com/hs-fs/hubfs/The-Storm-Proof-State-How-the-Bahamas-Built-a-Sovereign-Cloud-Against-the-Odds.webp?width=370&height=245&name=The-Storm-Proof-State-How-the-Bahamas-Built-a-Sovereign-Cloud-Against-the-Odds.webp)](https://info.cloudcarib.com/blog/the-storm-proof-state-how-the-bahamas-built-a-sovereign-cloud-against-the-odds) [Government](https://info.cloudcarib.com/blog/topic/government) ### [The Storm-Proof State: How the Bahamas Built a Sovereign Cloud Against the Odds](https://info.cloudcarib.com/blog/the-storm-proof-state-how-the-bahamas-built-a-sovereign-cloud-against-the-odds) #### Sign up for our newsletter and get great content delivered straight to your inbox. Cloud Carib - [About us](https://www.cloudcarib.com/about-us/why-cloudcarib/) - [Services](https://www.cloudcarib.com/services/) - [Solutions](https://www.cloudcarib.com/solutions/) - [Resources](https://www.cloudcarib.com/resources/news-centre) - [Partners](https://www.cloudcarib.com/partners/) - [Contact Us](https://www.cloudcarib.com/contact-us/) Data centre services [Facilities](https://www.cloudcarib.com/services/data-centre-services/cloud-facilities/) [Virtual Data Centre](https://www.cloudcarib.com/services/data-centre-services/virtual-data-centre/) [Managed Services](https://www.cloudcarib.com/services/data-centre-services/managed-services/) [Network Services](https://www.cloudcarib.com/services/data-centre-services/network-services/) [Managed Backups](https://www.cloudcarib.com/services/data-centre-services/managed-backups/) [Professional Services](https://www.cloudcarib.com/services/data-centre-services/professional-services/) Security & Business Continuity [Managed Security](https://www.cloudcarib.com/services/security-business-continuity/managed-security/) [Intrusion Detection and Prevention](https://www.cloudcarib.com/services/security-business-continuity/intrusion-detection-and-prevention/) [Disaster Recovery](https://www.cloudcarib.com/services/security-business-continuity/disaster-recovery/) Mobility & Productivity [Unified Communications](https://www.cloudcarib.com/services/mobility-productivity/unified-communications/) [Voice Services](https://www.cloudcarib.com/services/mobility-productivity/voice-services/) [Carib365](https://www.cloudcarib.com/services/mobility-productivity/carib365/) [Enterprise Mobility Management](https://www.cloudcarib.com/services/mobility-productivity/enterprise-mobility-management/) © 2018 Cloud Carib | Designed and Developed by [okto.](https://www.oktodigital.com/) Facebook Twitter LinkedIn