GDPR for Office on-premises Servers
The General Data Protection Regulation (GDPR) introduces requirements for organizations to protect personal data and respond appropriately to data subject requests. This series of articles provides recommended approaches for on-premises workloads:
For more information about the GDPR and how Microsoft can help you, see the Microsoft Trust Center.
Before doing any work with on-premises data, consult with your legal and compliance teams to seek guidance and to learn about existing classification schemas and approaches to working with personal data. Microsoft provides recommendations for developing and extending classifications schemas in the Microsoft GDPR Data Discovery Toolkit at https://aka.ms/gdprpartners. This toolkit also describes approaches for moving on-premises data to the cloud where you can use more sophisticated data governance capabilities, if this is desired. The articles in this section provide recommendations for data that is intended to remain on premises.
The following illustration lists recommended capabilities to use across each of these workloads to discover, classify, protect, and monitor personal data. See the articles in this section for more information.
Illustration description
For accessibility, the following table provides the same examples in the illustration.
| Action | Windows Server file shares | SharePoint Server | Exchange Server | Skype for Business | Project Server |
|---|---|---|---|---|---|
| Discover | Azure Information Protection scanner* | Search Center or eDiscovery (after data is classified) Azure Information Protection scanner* |
Exchange eDiscovery Portal | Exchange eDiscovery portal | SQL scripts for discovery and exporting |
| Classify | Azure Information Protection scanner* Office 365 sensitive information types |
Azure Information Protection scanner* Office 365 sensitive information types |
Exchange retention tags and retention policies | Exchange retention tags and retention policies | |
| Protect | Exchange Server data loss prevention rules Permissions, IRM-protection for libraries |
Exchange Server data loss prevention rules IRM integration with Exchange Server |
|||
| Monitor | Integrate logs with SIEM tools | Integrate logs with SIEM tools | Integrate logs with SIEM tools | Integrate logs with SIEM tools | Integrate logs with SIEM tools |
* Note that protection encrypts the file. Consequently, SharePoint Server can't find the sensitive information types in protected files.