1. GDPR Kartra (Controller)
1.1. Project leadership handed to Richelo and Hector
1.2. Compliance
1.2.1. RackSpace as our model
1.2.1.1. FAQ about the General Data Protection Regulation (GDPR) and Rackspace
1.2.2. Revision of Consent
1.2.2.1. Renewal of Consent for EU customers
1.3. Announcement re: Compliance
1.4. Security
1.4.1. PCI Compliance PenTesting by SecurityMetrics ensured reasonable degree of security
1.4.1.1. But there are still a few outstanding issues we might want to address
1.5. Revision of Privacy Policy to reflect compliance
1.5.1. Breach detection and notification policy
1.5.2. Convey dedication to security
1.6. Get contracts from partners re: GDPR compliance
1.6.1. Email
1.6.1.1. SendGrid
1.6.1.2. MailGun
1.6.1.2.1. Waiting for them to have docs ready
1.6.2. Pusher
1.6.2.1. Waiting for them to have docs ready
1.6.3. AWS
1.6.3.1. https://aws.amazon.com/compliance/gdpr-center/
1.6.4. RackSpace
1.6.4.1. Waiting on them
1.7. Right to be Forgotten
1.7.1. Determine scope of application
1.7.2. Determine scope of ability to comply
1.7.2.1. Kartra does it! Deleted from vendor's standpoint, hidden and archived from ours
1.7.2.2. Need to educate vendors on how to click all the boxes before deleting
1.8. Right to Access
1.8.1. SOP for letting inquirers know if their info goes through Kartra and to get a summary thereof
2. GDPR Jam (Controller)
2.1. Project leadership handed to Richelo and Hector
2.2. Compliance
2.2.1. RackSpace as our model
2.2.1.1. FAQ about the General Data Protection Regulation (GDPR) and Rackspace
2.2.2. Revision of Consent
2.2.2.1. Renewal of Consent for EU customers
2.3. Announcement re: Compliance
2.4. Security
2.4.1. SecurityMetrics to do PenTest
2.5. Revision of Privacy Policy to reflect compliance
2.5.1. Breach detection and notification policy
2.5.2. Convey dedication to security
2.6. Get contracts from partners re: GDPR compliance
2.6.1. Email
2.6.1.1. SendGrid
2.6.1.2. MailGun
2.6.1.2.1. Waiting for them to have docs ready
2.6.2. Pusher
2.6.2.1. Waiting for them to have docs ready
2.6.3. AWS
2.6.3.1. https://aws.amazon.com/compliance/gdpr-center/
2.6.4. RackSpace
2.6.4.1. Waiting on them
2.7. Right to be Forgotten
2.7.1. Determine scope of application
2.8. Right to Access
2.8.1. SOP for letting inquirers know if their info goes through Jam and to get a summary thereof
3. GDPR GD (Processor)
3.1. Zoom as our model
3.1.1. SecurityMetrics to do pentests
3.1.2. Harden Servers
3.2. Compliance
3.2.1. Revision of Consent
3.2.1.1. Renewal of Consent for EU customers
3.3. Announcement re: Compliance
3.4. Revision of Privacy Policy to reflect compliance
3.5. Right to be Forgotten
3.5.1. Kartra
3.5.1.1. No problem
3.5.2. GD
3.5.2.1. ?
3.6. Right to Access
3.6.1. Add to Privacy Policy