Data Protection Impact Assessment

Management applies DPIAs because it is required by law, and sometimes because the research tool is practical to test the effectiveness of security and control measures taken or to be taken.

Well-planned and executed DPIAs provide management with valuable information about business processes to be improved and processing of (personal) data and trade secrets.

Data Transfer Impact Assessment

Since the Schrems II ruling, the transfer of personal data has been subject to new conditions. Using a Data Transfer Impact Assessment (DTIA), an organization conducts prior research into the privacy risks involved in a transfer of personal data to a country outside the European Economic Area (EEA).

Organizing your accountability

We use an integrated and effective methodology to make business organizations compliant with legal and contractual obligations. The methodology makes use of compliance sources and specifications, standards frameworks and codes of conduct if required. The compliance organization can be supported with IT resources. This makes it easy for regulators, auditors and company management to use the findings of compliance work.

Privacy Baseline / Quickscan

The baseline measurement is an exploratory study aimed at gaining insight into compliance with data protection laws and regulations. The object of examination may be the organization, projects and supporting IT systems and provides insight into the extent to which risks are adequately covered by management and security measures.

Organising reputation management

Reputation management is a precondition for effective business. Partners want access to each other’s reliable data. Partners give access to their company and personal data if the confidentiality of the data is protected. Well-organized reputation management not only reduces liability and cost risks, but also fulfills a prerequisite for the effective organization of business activities.

Privacy implementation and maintenance

Management has since taken the necessary measures to effectively protect personal data. Additional legislation, changing business activities, new releases of IT systems and the departure of the DPO require periodic maintenance. Additional legislation, changing business activities, new releases of IT systems and the departure of the DPO require periodic maintenance.

Taking effective control measures

The regulators expect companies to ensure that the legal requirements are not applied but are built in, “by design,” into the business processes by which business activities are organized and personal data are effectively shielded “by default.” What are the requirements for control measures, and are the control measures taken or to be taken adequate and value-based?

SBC Management System, your privacy accounting

Standard Business Compliance (SBC) management system supports effective organization of privacy and information security. You meet your administrative obligations of 1) keeping a register of personal data processing operations; 2) keeping a record of incidents and data breaches; 3) following up on requests from data subjects; 4) processor agreements and 5) investigations conducted.

Company-specific learning environment and knowledge management

We maintain a collection of awareness and training programs on behalf of Duthler Academy and companies using a company-specific learning environment. Companies use general programs and programs they use to organize specific business activities.

Hire a DPO

When you hire an DPO through us, you have a qualified DPO without a large investment. Our DPOs are listed on Duthler Academy’s DPO Registry.

Hire a PO

Our professionals can also fill the role of privacy officer. Like the DPO, they are enrolled in Duthler Academy’s FG Registry.

Training DPO

New legislation, innovative IT measures and more effective oversight make the DPOs role more comprehensive. The position of the DPO in an organization is and remains solitary. The DPO training is designed for professionals who want to see the many sides of the work as an DPO highlighted and desire continuing education after successful completion of the course.

Three-day personal data protection training course

This three-day training is aimed at key officials and departmental management who will have to deal with establishing and maintaining effective privacy protection measures. Experienced professionals cover a variety of topics that participants can put on the agenda. We are happy to provide the training “in-house.”

Awareness in the workplace

Ultimately, it is about the organization of employees driving the processes so that the management, security and compliance measures effectively protect personal data. Workplace awareness forms a program that is company-specific and supported by the company-specific learning environment. The program is part of knowledge management and initiates behavioral change.