Coral advises MUWCI towards GDPR compliance

Mahindra United World College India is a college based in Pune, India

General Data protection regulation (GDPR) is an EU law mandating privacy and security controls on EU PII processing.

The process of GDPR compliance involved taking the organisation through the following steps (not exhaustive)

·      Understanding the organization business and personally identifiable information that it processes

·      Determining the business as ‘controller’ and/or ‘processor

·      Determining the applicable GDPR articles

·      Gap analysis against applicable requirements

·      Providing GDPR implementation strategy

·      Privacy impact Assessment and security risk assessment

·      Documentation of Privacy policy, procedures and process – based on the standard as well as the privacy driven policy requirements

·      Training all staff

·      Several sessions with the nominated staff for privacy operations

·      Internal Audit

Our PIMS-ISO 27701 Implementation and certification supports helps clients to achieve privacy and security excellence in their service delivery and internal control framework.

With the framework in place, MUWCI can demonstrate how its college operations has integrated GDPR.