How ISO 27001 Can Help Achieve GDPR Compliance

Isabel Maria Lopes; Teresa Guarda; Pedro Oliveira

doi:10.23919/CISTI.2019.8760937

How ISO 27001 Can Help Achieve GDPR Compliance

Isabel Maria Lopes, Teresa Guarda, Pedro Oliveira

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

Personal Data Protection has been among the most discussed topics lately and a reason for great concern among organizations. The EU General Data Protection Regulation (GDPR)is the most important change in data privacy regulation in 20 years. The regulation will fundamentally reshape the way in which data is handled across every sector. The organizations had two years to implement it. As referred by many authors, the implementation of the regulation has not been an easy task for companies. The question we aim to answer in this study is how far the implementation of ISO 27001 standards might represent a facilitating factor to organizations for an easier compliance with the regulation. In order to answer this question, several websites (mostly of consulting companies)were analyzed, and the aspects considered as facilitating are listed in this paper.

Original language	English
Title of host publication	14th Iberian Conference on Information Systems and Technologies, CISTI 2019
Editors	Alvaro Rocha, Isabel Pedrosa, Manuel Perez Cota, Ramiro Goncalves
Number of pages	6
Place of Publication	Los Alamitos, CA
Publisher	IEEE Computer Society Press
Publication date	Jun 2019
Article number	8760937
ISBN (Print)	9781728115528
ISBN (Electronic)	9789899843493
DOIs	https://doi.org/10.23919/CISTI.2019.8760937
Publication status	Published - Jun 2019
Externally published	Yes
Event	14th Iberian Conference on Information Systems and Technologies, CISTI 2019 - Coimbra, Portugal Duration: 19 Jun 2019 → 22 Jun 2019 Conference number: 14

Conference

Conference	14th Iberian Conference on Information Systems and Technologies, CISTI 2019
Number	14
Country/Territory	Portugal
City	Coimbra
Period	19/06/2019 → 22/06/2019

Series	Iberian Conference on Information Systems and Technologies, CISTI
ISSN	2166-0727

Keywords

Regulation (EU) 2016/679
ISO/IEC 27001
General data protection regulation

Access to Document

10.23919/CISTI.2019.8760937Licence: Unspecified

Handle.net

Persistent link

Cite this

Lopes, Isabel Maria ; Guarda, Teresa ; Oliveira, Pedro. / How ISO 27001 Can Help Achieve GDPR Compliance. 14th Iberian Conference on Information Systems and Technologies, CISTI 2019. editor / Alvaro Rocha ; Isabel Pedrosa ; Manuel Perez Cota ; Ramiro Goncalves. Los Alamitos, CA : IEEE Computer Society Press, 2019. (Iberian Conference on Information Systems and Technologies, CISTI).

@inproceedings{25aeb6b9da6949ab9c4f6d4078f4da42,

title = "How ISO 27001 Can Help Achieve GDPR Compliance",

abstract = "Personal Data Protection has been among the most discussed topics lately and a reason for great concern among organizations. The EU General Data Protection Regulation (GDPR)is the most important change in data privacy regulation in 20 years. The regulation will fundamentally reshape the way in which data is handled across every sector. The organizations had two years to implement it. As referred by many authors, the implementation of the regulation has not been an easy task for companies. The question we aim to answer in this study is how far the implementation of ISO 27001 standards might represent a facilitating factor to organizations for an easier compliance with the regulation. In order to answer this question, several websites (mostly of consulting companies)were analyzed, and the aspects considered as facilitating are listed in this paper.",

keywords = "Regulation (EU) 2016/679, ISO/IEC 27001, General data protection regulation",

author = "Lopes, {Isabel Maria} and Teresa Guarda and Pedro Oliveira",

year = "2019",

month = jun,

doi = "10.23919/CISTI.2019.8760937",

language = "English",

isbn = "9781728115528",

series = "Iberian Conference on Information Systems and Technologies, CISTI",

publisher = "IEEE Computer Society Press",

editor = "Alvaro Rocha and Isabel Pedrosa and Cota, {Manuel Perez} and Ramiro Goncalves",

booktitle = "14th Iberian Conference on Information Systems and Technologies, CISTI 2019",

note = "14th Iberian Conference on Information Systems and Technologies, CISTI 2019, CISTI 2019 ; Conference date: 19-06-2019 Through 22-06-2019",

}

Lopes, IM, Guarda, T & Oliveira, P 2019, How ISO 27001 Can Help Achieve GDPR Compliance. in A Rocha, I Pedrosa, MP Cota & R Goncalves (eds), 14th Iberian Conference on Information Systems and Technologies, CISTI 2019., 8760937, IEEE Computer Society Press, Los Alamitos, CA, Iberian Conference on Information Systems and Technologies, CISTI, 14th Iberian Conference on Information Systems and Technologies, CISTI 2019, Coimbra, Portugal, 19/06/2019. https://doi.org/10.23919/CISTI.2019.8760937

How ISO 27001 Can Help Achieve GDPR Compliance. / Lopes, Isabel Maria; Guarda, Teresa; Oliveira, Pedro.
14th Iberian Conference on Information Systems and Technologies, CISTI 2019. ed. / Alvaro Rocha; Isabel Pedrosa; Manuel Perez Cota; Ramiro Goncalves. Los Alamitos, CA: IEEE Computer Society Press, 2019. 8760937 (Iberian Conference on Information Systems and Technologies, CISTI).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - How ISO 27001 Can Help Achieve GDPR Compliance

AU - Lopes, Isabel Maria

AU - Guarda, Teresa

AU - Oliveira, Pedro

N1 - Conference code: 14

PY - 2019/6

Y1 - 2019/6

N2 - Personal Data Protection has been among the most discussed topics lately and a reason for great concern among organizations. The EU General Data Protection Regulation (GDPR)is the most important change in data privacy regulation in 20 years. The regulation will fundamentally reshape the way in which data is handled across every sector. The organizations had two years to implement it. As referred by many authors, the implementation of the regulation has not been an easy task for companies. The question we aim to answer in this study is how far the implementation of ISO 27001 standards might represent a facilitating factor to organizations for an easier compliance with the regulation. In order to answer this question, several websites (mostly of consulting companies)were analyzed, and the aspects considered as facilitating are listed in this paper.

AB - Personal Data Protection has been among the most discussed topics lately and a reason for great concern among organizations. The EU General Data Protection Regulation (GDPR)is the most important change in data privacy regulation in 20 years. The regulation will fundamentally reshape the way in which data is handled across every sector. The organizations had two years to implement it. As referred by many authors, the implementation of the regulation has not been an easy task for companies. The question we aim to answer in this study is how far the implementation of ISO 27001 standards might represent a facilitating factor to organizations for an easier compliance with the regulation. In order to answer this question, several websites (mostly of consulting companies)were analyzed, and the aspects considered as facilitating are listed in this paper.

KW - Regulation (EU) 2016/679

KW - ISO/IEC 27001

KW - General data protection regulation

U2 - 10.23919/CISTI.2019.8760937

DO - 10.23919/CISTI.2019.8760937

M3 - Article in proceedings

AN - SCOPUS:85070104494

SN - 9781728115528

T3 - Iberian Conference on Information Systems and Technologies, CISTI

BT - 14th Iberian Conference on Information Systems and Technologies, CISTI 2019

A2 - Rocha, Alvaro

A2 - Pedrosa, Isabel

A2 - Cota, Manuel Perez

A2 - Goncalves, Ramiro

PB - IEEE Computer Society Press

CY - Los Alamitos, CA

T2 - 14th Iberian Conference on Information Systems and Technologies, CISTI 2019

Y2 - 19 June 2019 through 22 June 2019

ER -

Lopes IM, Guarda T, Oliveira P. How ISO 27001 Can Help Achieve GDPR Compliance. In Rocha A, Pedrosa I, Cota MP, Goncalves R, editors, 14th Iberian Conference on Information Systems and Technologies, CISTI 2019. Los Alamitos, CA: IEEE Computer Society Press. 2019. 8760937. (Iberian Conference on Information Systems and Technologies, CISTI). doi: 10.23919/CISTI.2019.8760937