Internal compliance

All personal data you process for your business must be protected by design and by default. It may be necessary to implement certain tools to prove that you are meeting this obligation. Our team can provide approved methods and tools that are suited to your situation, in order to provide the best solution for your specific needs.

Define clear and legitimate purposes

You need to clarify the purposes of the data collection and assess its legitimacy for all flows and all sensitive data. You also have a responsibility to collect only data for that purpose, in line with the principle of data minimisation.

We work on your behalf to assess the validity of your data processing and suggest corrective measures where appropriate.

Set the rules for database purging

We help you determine how long you should use and store your data, in line with best practice in your sector and your needs, and will produce the corresponding archiving policy.

Keep records

The regulation has introduced a new duty to document all processing performed under your responsibility or by a third party and our team of lawyers can help you produce an inventory and keep the necessary records.

Carry out impact assessments

If your Data Protection Officer identifies any risk to personal rights or freedoms, you should carry out a privacy impact assessment as per the requirements of the new GDPR. Our law firm can help you with all the necessary analysis.

Use quality control

The way in which you ensure compliance with personal rights and freedoms carries a reputational risk. You could choose the certification option, however, and we can provide our expertise and support at every stage of the process.

GDPR: our lawyers support your business

The New Technologies/Intellectual Property team of our law firm will help you throughout the process of adapting your business to GDPR obligations and identifying your needs as a result.