THE INFORMATION IN THIS ARTICLE APPLIES TO:
DISCUSSION
The European Commission established the GDPR to ensure that companies follow a set of security and privacy standards that help safeguard the fundamental rights and interests of “data subjects.” Failure to comply with the standard may result in significant fines for organizations based in the EU or with an EU presence.
Globalscape has examined the scope of GDPR as it relates to on-premises software, self-managed in a public or private cloud, and cloud SaaS offerings, in addition to internal personal data processing and collection. Globalscape’s managed file transfer product offerings, EFT and EFT Arcus, provide the security, auditing, and governance features to help achieve and maintain a GDPR-ready posture.
GDPR’s scope as it pertains to Globalscape’s managed file transfer (MFT) software, EFT, whether it is deployed on-premises, self-managed in a public or private cloud, or in a SaaS-based capacity (EFT Arcus) is as follows:
- Receiver: EFT can receive files, which may contain personal data.
- Storage: EFT can optionally store files on a local or network attached disk upon receipt.
- Sender: EFT can further process received or stored files by transferring them to internal or external applications, systems, or servers, including to non-member states or organizations that may not adhere to GDPR standards.
- Configuration: EFT can optionally store certain personal data associated with authorized login accounts
- Posture: EFT can be deployed by customers on premises or in a SaaS configuration on computer systems or networks that may reside in the EU.
Please refer to the attached whitepaper for more detailed information about how EFT and EFT Arcus address each of the GDPR articles.