Compliance, Enterprise Data Protection

Whitepaper: PCI DSS as a Foundation for GDPR Compliance

Whitepaper

For companies striving to become GDPR compliant, the PCI DSS can used as a useful point of reference for a number of GDPR requirements. While far from identical, there are certain areas where the PCI DSS and GDPR overlap. Whether your

Organisation is already PCI compliant or moving in that direction, the technologies and processes required for PCI compliance can be used as a framework for GDPR compliance.

Depending upon your company’s status of PCI compliance, this overlap makes it possible to either fulfil certain requirements of each regulation simultaneously or to leverage existing PCI compliant technology and processes and apply them to the GDPR’s definition of personal data.

This document provides insight on how to take advantage of this overlap as a part of your overall data security strategy.