GDPR Scanning for Google Drive

Ohalo is excited to introduce GDPR scanning for Google Drive through the Data X-Ray. Your data sits across multiple user accounts and Team Drives in Google Drive. Under the new GDPR regulations coming in May 2018, you need to know where your sensitive data is so that you can take measures to control that data.

With GDPR coming into force in May 2018, it is important that companies using cloud services know where their data is so that they control it. The GDPR is wide ranging, with Article 9 and 10 explicitly forbidding some forms of data processing. Likewise, the regulation requires that Data Controllers and Data Processors implement sufficient technical measures to ensure that data is secured and be able to prove that to regulators and Data Subjects upon request (Section 1, Articles 24, 25, 28, and 30, and Section 2, Article 32). However, it is hard to know where sensitive data as employees may create documents, save data to their own Google Drive account off of the Team Drive, and not remember where they saved data previously.

Ohalo’s Data X-Ray has always been a great tool to scan for sensitive data on data sources ranging from SQL to NoSQL databases. Our Google Drive integration is our first cloud service integration, enabling a one-click experience to know where sensitive data is in Google Drive. As an admin user, you simply have to click on the button on our sign up page, authenticate, and you can be up and running in seconds. You can also invite your team to join so that they can monitor their own personal drives as well as the Team Drive.

The Data X-Ray gives users a way to know where exactly their sensitive data is. It tags lists of data with metadata concerning its regulatory characteristics so that you can be sure that you are treating data in a compliant way. We think this is the next evolution of the Data X-Ray and will be implementing further integrations with other cloud services in the near future, such as SharePoint, Box, and more. Let us know if you have a cloud service that you want to integrate and we’ll be happy to add it to our roadmap.

About Ohalo

Ohalo builds tools to automate data governance. The Data X-Ray scans for sensitive data on a regular basis so that you are always up to date with where your sensitive data is. Simply sign up here. Once you have established a baseline of where your most sensitive data is, you can track where that data is going with the Data Protection Router in order to assist your clients in Data Subject requests like access, rectification, erasure, and breach notification.