GDPR and personal data protection
Data protection impact assessment (DPIA)
I prepare data protection impact assessments (DPIAs) for processing that poses a high risk to the rights and freedoms of individuals. The process covers a description of the processing, an assessment of necessity and proportionality, an analysis of the risks, the measures envisaged to reduce them and consultation with the supervisory authority where this is required.
Contact meRelated services
More in “GDPR and personal data protection”
GDPR audit and implementation of compliance
Review of personal data processing and preparation of the full documentation.
Data breaches and proceedings before the CPDP
Response to a personal data incident and representation before the Commission for Personal Data Protection.
GDPR audit of your activities
Review of processing and identification of non-compliance.
Data protection officer (DPO) as a service
An external data protection officer (DPO) as a service.
Privacy policy and information notices for data subjects
For websites, online shops, mobile apps and forms.
Cookie policy and consent mechanism
Compliant with the requirements for informed and freely given consent.
Data processing agreements (DPA)
With service providers, accountants, IT subcontractors, hosting and cloud platforms.
International data transfers
Standard contractual clauses and transfer assessment for providers outside the EU/EEA.
Personal data protection in employment relationships
Video surveillance, access control, processing of job applicants’ data.
Responding to requests from data subjects
Access, rectification, erasure (“right to be forgotten”), portability, objection.
Response to a data security breach
Assessing the incident and notifying the CPDP and the affected individuals.
Representation in inspections and proceedings before the CPDP
Inspections, proceedings and appeals against acts of the Commission for Personal Data Protection.