What if I stored Personally identifiable information (PII) on cloud but with IP restricted environment or using VPN. Will it be GDPR compliance?
<p>I have a requirement to <code>fetch</code> and <code>search</code> (partial search, full text search, fuzzy search etc) <code>personally identifiable information (PII)</code> data in Admin Panel and I can restrict my environment with <code>IP white labeling</code> or using <code>VPN</code>. What if I <code>stored PII without encryption (as plaintext) on cloud</code> but with <code>IP restricted</code> environment or using <code>VPN</code>. Will it be <code>GDPR compliance</code>?</p>

<p>Impossible to say from what you write here. </p>

<ul>
<li>The GDPR requires you to have comprehensive policies and processes in addition to technical means which safeguard PII. Arguably the technical details are the <em>least</em> relevant -- who decides which IPs get whitelisted? What are your contracts with the cloud providers?</li>
<li>A colleague in IT operations repeats the quote "there is no cloud, there are just other people's computers." Various cloud providers have their servers in different locations, the big ones even allow the user to select where the data will be.</li>
</ul>

<p>The GDPR is new enough that you cannot possibly rely on answers from random folks on the internet (including mine). You need to consult an expert.</p>

<p>Your company should have appointed a data security officer. If it hasn't, that's the first step. </p>

gdpr