GDPR

The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is in force from 25 May 2018.The GDPR applies to all organisations and strengths the rules in relation to the protection, storage, consent and use of all data.

Non- compliance can result in administrative fines up to EUR 20,000,000 or, in the case of an undertaking, up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher.

Therefore, it is crucial that your business is GDPR compliant before the regulations become effective. This means updating all of your Company contracts, employment contracts, commercial contracts, handbooks, policies and agreements.

Our consultants have extensive GDPR knowledge and are able to help you with all your GDPR requirements or questions.

GDPR Audit

The GDPR is a vast and expanding area and is likely to mean that you are required to change many of your current practices and policies. We know that this can be overwhelming for a business and so our aim is to simplify the process for you. Our GDPR Audits are targeted and deliver you a comprehensive assessment and report actions that you can start to address as soon as the Audit is complete. These include cultural, structural and practical changes .We will attend your business to carry out a detailed assessment of your current practices and provide you with a complete document of the changes that you are required to make and how to ensure that your business is GDPR compliant.

The GDPR has been implemented to address, amongst other things, changes in technology and how data is processed using technology. As such, we also work closely with out in- house IT team to ensure that your technical processes are GDPR compliant and provide you with advice on technical changes you may wish to make to make your processes more efficient.

GDPR Policies

An integral part of the GDPR is to ensure that you have appropriate documentation and records of your data protection practices. This is to ensure that Data Subjects (those whose data you control and process) are fully informed of the types of data you hold about them, how this data is protected, whether it is transferred to any third parties (in or outside Europe), the reasons for controlling and processing their data and how long you intend to retain their data.

The GDPR Policies we draft are based on the responses you provide us in the GDPR Audit and is therefore tailored to your business, whilst ensuring all the legal obligations have been met and recorded. It ensures that your business meets your compliance requirements by being transparent and accountable.

We are also able to draft your GDPR compliant Privacy Policy and Cookie Policy and terms and conditions to provide with any third parties that you contract with.

Data Protection Officer Support

Depending on the nature of your business and the type of data you process, it may be mandatory for you to appoint a Data Protection Officer.

However, we believe that given the strategic, financial and reputational importance of ensuring that you have a compliant approach to the handling of personal data in your business, it is likely that you will decide to appoint a Data Protection Officer nevertheless.

You may wish to appoint a current employee within your business or make a full- time appointment. Whatever you wish to do, we are able to provide you with ongoing or one-off support and training for the Data Protection Role. Alternatively, we are able to act as your outsourced Data Protection Officer for your business, regularly reviewing your practices and procedures to ensure that you are GDPR compliant and handle any issues or complaints that may arise.