The European Union has taken a monumental step in protecting the fundamental right to privacy for every EU resident with the General Data Protection Regulation (GDPR) effective from May 25, 2018. Simply put, EU residents will now have greater say over what, how, why, where, and when their personal data is used, processed, or disposed. This rule clarifies how the EU personal data laws apply even beyond the borders of the EU. This applies to the data of all the residents of the European Union. 

At Zoho DataPrep, we have always honoured our users' right to data privacy and protection. Over the years, we have demonstrated our commitment to data privacy and protection by constantly meeting and exceeding industry standards. Our compliance with ISO 27001:2013 and SOC 2 Type II is an effort towards this.  We have no need to collect and process users’ personal information beyond what is required for the functioning of Zoho DataPrep, and this will never change. We have a privacy-conscious culture here and GDPR is an opportunity for us to strengthen this even further.

Designed to help you meet the privacy standards set by the EU, Zoho DataPrep has multiple GDPR-centric enhancements that provide a streamlined mechanism, from storing data to handling data subject rights. This way you don't have to worry about compliance and focus more on running your business. 

This documentation will brief you about the features that Zoho DataPrep offers with respect to GDPR compliance, and how to use them: 

In case you have any queries regarding our policy, please feel free to write to us at support@zohodataprep.com.

Zoho DataPrep allows you to mark columns as Personally Identifiable Information (PII). This could be any information that could potentially identify an individual, for example. Name, Email, Job role and Company name etc. When a column is marked as PII, additional care will be taken in handling such data. The data will be encrypted and saved in our servers. The below image shows how to mark a column as PII.

Encryption at Rest

1. All data uploaded for preparation will be encrypted and stored in our servers.
2. Any private information provided for authenticating third-party applications or databases will automatically be identified with due diligence and stored in our databases in an encrypted manner.
   

Enhanced Data Privacy and Security