Protecting personal data

The management organizes the business activities with business processes. The processes are managed by departmental teams in which employees are assigned roles and fulfill tasks. A role has powers and responsibilities. On request, an employee with a role performs a task. When the task is finished, the employee lets you know and sends another employee with a role to perform the next task. In the process, the requests and the completion of tasks are recorded in data. There is a data-driven business.

Data protection and privacy is and remains a complex issue, with new risks occurring every day. Are you looking for pragmatic privacy advice and its implementation? We advise organizations on how to deal with ever-changing obligations in the areas of data protection, privacy and information security.

Data Protection Impact Assessment

Management applies DPIAs because it is legally required, and sometimes because the research instrument is practical to test the effectiveness of security and management measures taken or to be taken.

Well-planned and executed DPIAs provide management with valuable information about business processes that need to be improved and the processing of (personal) data and trade secrets.

Data Transfer Impact Assessment

Since the Schrems II ruling, the transfer of personal data has been subject to new conditions. On the basis of a Data Transfer Impact Assessment (DTIA), an organization conducts a preliminary investigation into the privacy risks involved in a transfer of personal data to a country outside the European Economic Area (EEA).

Privacy Nulmeting / Quickscan

The baseline measurement is an exploratory study aimed at gaining insight into compliance with data protection laws and regulations. The investigation provides the person responsible, the board of directors and the supervisory board, with insight into the extent to which the risks are covered by measures and the effective operation of these measures.

Organizing reputation management

Reputation management is a precondition for effective business. Partners want access to each other’s reliable data. Partners give access to their company and personal data if the confidentiality of the data is protected. Well-organized reputation management not only reduces liability and cost risks, but also fulfills a prerequisite for the effective organization of business activities.

Privacy implementation and maintenance

The GDPR requirements and AP supervision have led companies to protect personal data. In the meantime, a DPO has often been appointed, awareness campaigns have been held and processing agreements have been concluded, and data leaks are being tracked. This is not enough if we read the guidelines of the regulators. In addition, new and adjacent legislation has emerged and powerful tools are coming onto the market with which the protection of personal data can be effectively organized. How do we bridge the expectation gap?

Taking effective control measures

The European supervisors expect in their guidelines from companies that the legal requirements “will not be applied” but “will be built into” the business processes with which business activities are organized. What are the requirements for control measures and are the control measures taken or to be taken adequate and stable in value? Are the security and control measures included in the (to be purchased) IT systems?

Training program to protect personal data

This is a subject that remains on the agenda of the management. The importance is clear to everyone, but how do you organize that? We have made an attempt to organize business activities and set up control measures. It is necessary for us to provide value-retaining services.