NetApp – Maintaining GDPR Compliance SNS - Preparing for GDPR, London 7th, May 2017 Martin Warren – Cloud Solutions, EMEA © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use © 2015 NetApp, Inc. All rights reserved. NetApp Proprietary – Limited Use Only

Customers are transforming digitally to create value ENABLE new customer touchpoints Key notes: Digital transformation is driven by data …. In fact, data is becoming the lifeblood of an organization Enables new customer touch points (better targeting to cross- and upsell, 360 holistic view) Creates innovative business opportunities (agile development, testing new capabilities, fast path to revenue, top line growth) Optimizes operations (reduce capital expenditure, opex, efficiencies) Some customers are tackling one of these. Some are doing all. This is another opportunity to dig deeper into your customer’s business priorities. CREATE innovative business opportunities OPTIMIZE operations © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use © 2015 NetApp, Inc. All rights reserved. NetApp Proprietary – Limited Use Only

Enterprises are on the move On Premises Off Premises Public Cloud Private Cloud 80% of enterprises will commit to hybrid cloud architectures by 20171 50% expect to shift the majority of their workloads to off-premises cloud or colocation by 20202 78% of enterprises consider managing data across multiple clouds “critical”3 Scott Cook, founder and CEO of Intuit, suggests that three positive things happen when you learn to use and rely on data: 1. Your quality of decision making improves because you can base your choices on information from real customers and not on “theory.” 2. You empower even junior employees to make suggestions they can back up with data. 3. And your people encounter fresh information that encourages “innovation.” Everyone of you have customers who just aren’t there yet. They feel like they need to move to cloud or at least they’ve been told to, but their valuable data is still locked away and chained up. You, the sales person, can be the one who helps free that data and put it in a place where customers can finally gain velocity and make better informed, faster decisions to finally stay one step ahead of their competition. Hybrid cloud deployment models—a combination of private and public cloud resources—are becoming the new normal for enterprise IT organizations. IDC reports 80% of enterprises will commit to hybrid cloud architectures by 20171 (which really means they’re deploying some type of cloud technology this year). And IDG Enterprise Computing Study says 78% of enterprises consider managing data across multiple clouds critical3 They offer a wide choice of application environments with a seemingly limitless pool for compute, network, and storage resources. Organizations want the freedom to move applications and workloads to the optimal environment as their needs change and as new options gain traction in the market. Hybrid cloud is an IT delivery approach that leverages both on-premises and public cloud resources. NetApp believes a true hybrid cloud is one that customers can build on their terms. It is multicloud and multidirectional, integrating any combination of resources that are on premises, connected to the cloud, and in the cloud. 1 Source: IDC, FutureScape, 2016 2 Source: Uptime Institute/451 Group, June 2016 3 Source: IDG Enterprise Computing Study, 2015 © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use © 2015 NetApp, Inc. All rights reserved. NetApp Proprietary – Limited Use Only

Simplify, automate and evolve the management of data © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use Simplify, automate and evolve the management of data HARNESS the power of the hybrid cloud 10101010101010101010010010010010010010010010100101010101010101010101010010010101010101010101001010101010101010101010101010101010100000101010010010010010010101001001010100100100100100100100100100100101001010100000101010010010010010100100101 ENTERPRISE IT NEXT-GEN DATA CENTER NetApp DATA FABRIC MULTI-CLOUD PUBLIC CLOUD Simplifies and integrates data management across cloud and on-premises to accelerate digital transformation. Delivers consistent and integrated data management services and applications for data visibility and insights, data access and control, and data protection and security. Unleashes the power of data to achieve a new competitive advantage. MODERNIZE Storage through data management BUILD a next-generation data center © 2015 NetApp, Inc. All rights reserved. NetApp Proprietary – Limited Use Only

General Data Protection Regulation Overview of key points First and foremost a legal compliance issue – not an IT issue Massive overhaul of EU data protection laws GDPR applies to ANY company, anywhere in the world that processes EU citizens’ data Fines up to €20m or 4% global revenue for each instance. Example: a GDPR fine of 4% of global revenue to a large $150B multinational = $6B! Potential fines will put GDPR onto the top priority lists of IT departments in all major multinationals and enterprise accounts, in many cases dwarfing the importance of all other IT projects Data security is NOT data privacy Privacy – legal collection, use, sharing, storage & transfer of data; legislation and regulations Security – fortress around the data © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use

So many GDPR Articles, where can technology help? Processing not allowing identification Article 23 Data protection by design & default Article 32 Security of Processing Article 35 Data Impact Assessments Article 25 Privacy by design Article 17 Right to erasure and to be forgotten Article 20 Data portability Article 30 Records of processing activities Articles 44-50 Data transfers © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use

GDPR – First and foremost a Legal Compliance issue No one company has all the pieces of the jigsaw Privacy Assess Compliance NetApp is a Privacy Exemplar 1 of <100 companies with BCRs Model Contractual Clauses GDPR Legal and Compliance Consulting Legal Governance Risk and Compliance (GRC) E-Discovery (find Personal Data) Case management (Manage GDPR cases/events) NetApp allows organisations to maintain ongoing compliance Data Fabric: ONTAP family OnCommand Insight NetApp Private Storage StorageGRID Webscale, etc. Service Level Manager is a software solution that enables you to manage your storage based on defined service levels. Think of this as a three step process: Start by standardizing your service levels and defining your SLOs within your Service Catalog. With Service Level Manager you can define SLOs for storage capacity, performance and data protection. By doing this, you significantly simplify how you provision your storage because it’s provisioned according to SLOs. Next, you apply intelligent provisioning automatically so that you can accelerate service delivery while provisioning according to available resources. Service Level Manager capabilities also enable you to consistently meet your utilization goals. Service Level Manager also monitors your services and establishes a feedback loop for you so that you able to check that you are adhering or conforming to your service levels as well. Service Level Manager simplifies storage service delivery, and enables you to optimize storage operations for predictable, consistent service. Holistic Approach © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use © 2015 NetApp, Inc. All rights reserved. NetApp Proprietary – Limited Use Only

How Technology can help maintain GDPR Compliance Ensuring Data Availability Enforcing Data Security Providing for Data Transfer & Portability Maintaining Data Governance Understanding your Data © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use

NetApp - Helping maintain GDPR compliance Heterogeneous on-premise & cloud infrastructure discovery with OnCommand Insight Integration & automation of database anonymisation with SnapManager, SnapCreator and WFA Data High Availability, Bus. Continuance, DR & Encrypted Backup with the NetApp Data Storage Portfolio & AltaVault Non-disruptive data availability testing with FlexClones Encryption and Enterprise Access Control & Auditing across the NetApp Portfolio Immutable data records retention with SnapLock Dynamic policy-based data management with StorageGRID Webscale Data management automation with WorkFlow Automation, API Services & Service Level Manager Ransomware recovery and forensics access with SnapShots and FlexClones Hybrid Cloud advantage, data portability and transfer with the NetApp Data Fabric GDPR Articles:: GDPR Articles:: 17 35 30 32 35 GDPR Articles:: 6 23 GDPR Articles:: 17 25 32 GDPR Articles:: GDPR Articles:: 23 30 32 6 17 GDPR Articles:: 23 32 GDPR Articles:: 6 23 32 44-50 GDPR Articles:: 23 25 32 GDPR Articles:: 20 23 © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use

NetApp Data Fabric Off-prem Data Fabric On-prem Putting you in control of your data Hyperscaler Cloud Off-prem Engineered Data Storage Software Defined Data Storage Cloud Data Storage Service Provider Cloud Data Availability So with the challenges we talked about, 24x7 data availability, security, data mobility and management visibility and cost control. How do you deliver this on the factory floor, within a Schneioder Micro Data Centre for example, into the remote office, the enterprise data centre, into a service provider cloud, or the public cloud? Well NetApp can help you here. We deliver data management solutions that provide: Engineered data storage for your data centre and factory floor SW defined storage for your remote office and to make use of commodity HW Cloud storage that you can lay on top of AWS, Azure, IBM etc. We provide analytics data platforms and enable you to easily take advantage of cloud analytics services Across all of these, we protect and secure that data, whilst providing the tools to provide data portability across the factory, enterprise dc and the cloud. With all of these we provide cross hybrid cloud data management, visibility and full API control of you data resources. The coup de grais though is that we tie all this together with one seamless data fabric, providing data mobility and protection through the NetApp Data Fabric. Data Protection Data Fabric On-prem Data Security Data Management Hybrid Cloud Data Mobility Data Visibility Factory Floor Enterprise Data Centre Data Automation Remote Office Data Room © 2017 NetApp, Inc. All rights reserved. NetApp Confidential © 2014 NetApp, Inc. All rights reserved. NetApp Proprietary – Limited Use Only

Key Takeaways The 25th May deadline is only one year away . . . GDPR is first and foremost a legal compliance issue Technology tools are important, but that’s not where you should start Once everything’s in place, focus on how you’re going to manage your data going forward Consider how you might use compliance as a competitive advantage © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use

Thank You © 2017 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use