Auditing, classifying and building a data sovereignty strategy | Computer Weekly
Briefly

Auditing, classifying and building a data sovereignty strategy | Computer Weekly
"Data sovereignty is a hot topic. For commercial and public sector organisations, compliance to ensure personal data is secure is a primary objective. And that means it cannot be subject to foreign laws or interference. Data sovereignty is also a matter for international relations, where states strive to ensure citizen and organisation data is secure from foreign interference. And, for states, achieving data sovereignty is also a way of protecting and developing national economies."
"More recently, the drive to digital sovereignty stepped up to the level of states. That trend got a big boost during US president Donald Trump's first term. That saw the country's introduction of the Clarifying Lawful Overseas Use of Data (Cloud) Act, for example, which potentially allows US law enforcement to access data stored by US companies anywhere. Alarm bells started ringing, especially in Europe."
Data sovereignty is the retention of data within the jurisdiction whose laws govern its use. Compliance drives organisations to keep personal data secure and prevent it from being subject to foreign laws or interference. States pursue data sovereignty to protect citizens' data from foreign interference and to nurture national economies. Concentration of cloud infrastructure with major providers increases exposure to foreign legal reach, exemplified by the US Clarifying Lawful Overseas Use of Data (Cloud) Act enabling access to data held by US companies worldwide. CIOs should audit and classify data, and implement controls over data location and movement to achieve operational data sovereignty.
Read at ComputerWeekly.com
Unable to calculate read time
[
|
]