Vikas Dewangan (Senior Technology Architect) Embracing data privacy for GDPR compliance in Non-production environments Vikas Dewangan (Senior Technology Architect) Prashant Gupta (Technology Architect) Infosys Limited

Abstract Enforcement date: 25 May 2018 Are you ready? The primary objectives of the GDPR are to give citizens and residents back control of their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU The regulation also applies to organizations based outside the European Union if they collect or process personal data of EU residents Under GDPR, organizations in breach of GDPR can be fined up to 4% of annual global turnover or €20 Million (whichever is greater). This is the maximum fine that can be imposed for the most serious infringements Enforcement date: 25 May 2018 Are you ready?

Ten key dimensions of GDPR Privacy by design Consent to process data Data protection impact assessments Data portability Data protection officer Right of access Records of processing activity Right to be forgotten Extra-territorial applicability Data breach notification duty 1 2 3 4 5 6 7 8 9 10 Dimensions relevant to NPE and TDM

Addressing GDPR requirements for NPE and TDM Solution area Privacy by design Data protection impact assessments [A] Data privacy solution Records of processing activity Extra-territorial applicability Focus of our GDPR NPE / TDM solution Data protection officer [B] Information assurance Data breach notification duty

GDPR: Personal Data

GDPR: Anonymization vs Pseudonymization Definition GDPR Clause Techniques Permitted in GDPR?

Infosys Data Privacy Solution for NPE A. Anonymization B. Access Control C. Records of Processing Activity D. Validation GDPR NPE Implication

How GDPR maps to the 4 solution areas?

Discovery and Planning Implementation Steps Discovery and Planning Analyze Implement Rollout Expand

References & Appendix European Union – General Data Protection Regulation http://www.privacy- regulation.eu/en/

Author Biography Vikas Dewangan is a Test Data Management Architect at Infosys with over 19 years of IT experience. He has worked with several clients across geographies and industry verticals to help them define their Test data management strategies and work with them for implementing TDM. His broad areas of expertise include TDM assessment, strategy development and solution definition.   Prashant Gupta is a Technology Architect at Infosys with over 12 years of IT experience. His areas of focus include Data Migration testing, Data warehouse testing and Test Data Management. Currently he is a part of Infosys Test Data Management COE which helps various clients for addressing their test data challenges using standard markets solutions.

Thank You!!!