1. Top 10 Tips for GDPR Compliance in Office 365
10 tips to get your business up-to-date with GDPR Compliance in Office

2. 1. Check your GDPR compliance by taking Microsoft’s Assessment
Microsoft provides a free assessment for your business that you can take at any time

3. 2. Check your Data Center’s Location
Microsoft now lets Office 365 users change the location of their data centers in the event they have specific data residency requirements.
Microsoft’s “Where’s Data Map” lets you see where exactly you data is stored.

4. 3. Use DLPs to monitor your system
Microsoft’s Data Loss Prevention policies (DLPs) let you to identify, monitor, and automatically protect sensitive information across Office 365.
Model for Microsoft’s Data Loss Prevention Policies

5. 4. Use Advanced Data governance
Advanced Data Governance is a feature that reduces your risk profile while making it easier to retain high value data and ensure business continuity.
A video from Microsoft detailing its Advanced Data Governance feature

6. 5. Use encryption keys
By pairing Customer Key for Office 365 with Azure, you can configure Office encrypt your data at rest in Microsoft’s data centers, as well as distributing or revoking keys yourself.
Two root keys
Protected by
Azure Key Vault
Availability key
Protected by
Office 365
Data encryption policy (DEP) key
Protected by each root key
Mailbox Key
Protected by data encryption policy key
Data Encryption in Customer Key for Office 365

7. 6. Control Access with Lockbox
Customer Lockbox for Office 365 lets you control, grant, and deny access to your data when requested by a Microsoft support engineer.
Overview of Customer Lockbox in Office 365

8. 7. Migrate your data
Office 365 provides a data import service to facilitate the move between on-premises and files into Exchange Online, SharePoint Online, and OneDrive for Business.
Microsoft’s video on how to use FastTrack for file migration

9. 8. Supervise Employee communications
In addition to previously mentioned features Office 365 Advanced Data Governance also comes with a Supervision feature that gives officers a practical way to comply with regulations.
Screenshot of the new Supervision feature for Advanced Data Governance

10. 9. Use ediscovery to find relevant data
Office 365 Advanced eDiscovery provides an intelligent analysis and searches relevant unstructured data for review.
Microsoft’s tutorial to help you get started with eDiscovery

11. 10. Use Microsoft audit to monitor and investigate data
Office 365 has an Auditing feature to improve transparency, and to let you monitor and investigate actions taken on your data, identify risks, contain and respond to threads, and protect your valuable intellectual property.
Screenshots of the Auditing feature for Office 365