We\u2019re committed to partnering with Meplis customers and users to help them understand and prepare for the General Data Protection Regulation (GDPR). The GDPR is the most comprehensive EU data privacy law in decades, and will come into effect on May 25, 2018. Besides strengthening and standardizing user data privacy across the EU nations, it will require new or additional obligations on all organizations that handle EU citizens\u2019 personal data, regardless of where the organizations themselves are located. On this page, we\u2019ll explain our methods and plans to achieve GDPR-compliance, both for ourselves and for our customers.<\/p>\n
Last modified: November 24, 2017<\/em><\/p>\n
Preparing for the GDPR<\/strong><\/span><\/p><\/blockquote>\n
The GDPR\u2019s updated requirements are significant and our global team is working diligently to bring Meplis\u2019 product offerings and contractual commitments in line so customers can prepare themselves before May 25, 2018. Measures to achieve this include:<\/p>\n
\n
- Continuing to invest in our security infrastructure<\/li>\n
- Making sure we have the appropriate contractual terms in place. Ensuring we can support international data transfers by maintaining our Privacy Shield self-certifications, and by executing Standard Contractual Clauses through our updated Data Processing Addendum<\/li>\n
- Changing our policies and product offerings to include new tools for data portability and data management<\/li>\n<\/ul>\n
We\u2019ll also continue to monitor the guidance around GDPR compliance from privacy-related regulatory bodies, and will adjust our plans accordingly if it changes. We\u2019ll provide you with regular updates along the way so that you\u2019re always current. You\u2019ll find out about our upcoming product offerings as they become available.<\/p>\n
Our Security Infrastructure and Certifications<\/strong><\/em><\/h2>\n
Protecting our customers\u2019 information and their users\u2019 privacy is extremely important to us. As a cloud-based company entrusted with some of our customers\u2019 most valuable data, we\u2019ve set high standards for security. We are in the process of expanding our ISO 27000 standards on information security management systems, the industry standards for how organizations handle data and implement security.<\/p>\n
Meplis has invested heavily in building a robust security team, one that can handle a variety of issues \u2014 everything from threat detection to building new tools. In accordance with GDPR requirements around security incident notifications, Meplis will continue to meet its obligations and offer contractual assurances.<\/p>\n
If you\u2019d like to learn more about Meplis\u2019 security policies and procedures, please see our\u00a0security page<\/a>. It provides detailed information on how we approach security, and includes information on how Meplis ensures user data security in particular.<\/p>\n
International Data Transfers: Privacy Shield and Contractual Terms<\/strong><\/em><\/h2>\n
To comply with E.U. data protection laws around international data transfer mechanisms, we self-certified under the\u00a0E.U.-U.S. Privacy Shield<\/a>\u00a0and the\u00a0Swiss-U.S. Privacy Shield<\/a>. These frameworks were developed to establish a way for companies to comply with data protection requirements when transferring personal data from the European Union and Switzerland to the United States.<\/p>\n
In addition, we offer European Union Model Clauses, also known as Standard Contractual Clauses, to meet adequacy and security requirements for our customers who operate in the E.U.<\/p>\n
Data Portability Solutions and Data Management Tools<\/strong><\/em><\/h2>\n
Customers have requested tools to help them comply with the GDPR. And we\u2019re happy to say that over the next few months, we\u2019ll be building those tools. Information about the features and functionalities of these tools will be shared with you as it becomes available.<\/p>\n
Compliance-related controls will include the following:<\/p>\n
\n
- Customer Data portability tool:<\/strong>\u00a0Will expand customers\u2019 ability to export their Customer Data.<\/li>\n
- Personal Data Tools for Admins and Users:<\/strong>\u00a0Will provide admins the ability to modify profiles within their teams. Users may also have ability to search and modify their personal data and content submitted to Meplis in certain situations.<\/li>\n<\/ul>\n
Stay Updated<\/strong><\/em><\/h2>\n
Fulfilling our privacy and data security commitments is important to us. So we\u2019re glad to help you prepare for all the changes the GDPR brings. This page will be revised to reflect GDPR-related information as it becomes available. If you have any questions about how Meplis can help you with compliance, we hope you\u2019ll reach out to us.<\/p>\n
\nResources<\/h3>\n
\n
- Guide to Meplis Data Exports<\/a><\/li>\n
- Meplis\u2019s security page<\/a><\/li>\n
- E.U.-U.S. and Swiss-U.S. Privacy Shield<\/a><\/li>\n
- Full text of the GDPR<\/a><\/li>\n<\/ul>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"
We\u2019re committed to partnering with Meplis customers and users to help them understand and prepare for the General Data Protection Regulation (GDPR). The GDPR is the most comprehensive EU data privacy law in decades, and will come into effect on May 25, 2018. Besides strengthening and standardizing user data privacy across the EU nations, it … <\/p>\n