Avaya, a leading global business communications company, has laid out guidance to help its customers achieve compliance now that the new EU privacy regulations are in effect.
GDPR (General Data Protection Regulation) provides citizens living within the EU and European Economic Area (EEA) with a number of new legal rights relating to the gathering, use and deletion of their personal data by businesses. These include the right to access the data that a company holds on them, the right that their data is only processed based on certain limited legal basis, one of which is consent; and the right to be ‘forgotten’ in certain circumstances.
GDPR clearly defines the use of a person’s personal data as relating to an identified or identifiable natural person. The new law controls any information that can be used to identify somebody via direct or linked reference, including email addresses, phone numbers, payroll data, usage statistics, purchasing history, social security numbers, etc.
Avaya solutions are engineered to help their customers protect an individual’s data, with enhanced security and many features that may be leveraged by an organisation to comply with GDPR. These include scripts and prompting menus that could be used across multiple digital channels – including web chat – to help gain informed consent from an individual prior to collecting their data.
Avaya’s products will document what data they collect; and the mechanisms to be used to handle it.