Planning your regulatory compliance journey in Microsoft 365
To start planning for regulatory compliance using Microsoft 365, organizations should be aware of the rules and regulations to which they need to adhere to be considered compliant by regulatory bodies and standards. These include the General Data Protection Regulation (GDPR), which comprises rules for organizations that offer goods and services to people in the European Union (EU) or ones that collect and analyze data for EU residents regardless of where they or their organization may be located. The GDPR provides individuals with the right to manage any personal data that relates to them that has been collected by an organization. The individual can exercise these rights by lodging a Data Subject Request (DSR). The organization must respond in a timely fashion to DSRs and also perform Data Protection Impact Assessments (DPIAs).
Some of the terms and references you may encounter in relation to GDPR include the following...