An important starting point for every organization is to know what the amount of personal data is being processed in the organization. According to the GDPR art. 30 every organization needs to have this overview. We have experience in setting up such an overview in a data mapping exercise that will a structured overview of the most important data processing activities within the organization.

THe GDPR requires a lot of documentation in policies. Instead of re-inventing the wheel, we offer you the opportunity to quickly select and tailor the relevant needed policy material for your organization. 

A policy on privacy should not only focus on the external website privacy policy and the Cookie notices, but you should also describe your internal set-up of the data protection function and guidelines for employees on how to deal with the most important data privacy topics. 

Make sure that employees know what data protection means and more importantly: what it means within your organization. Training should teach employees in practical ways how they should do certain things in line with the applicable policies and procedures. Our trainings are always tailored towards the specific audience and the specific clients.

We take great pride in the fact that our participants give consequent positive feedback to our training. 

Let us convince you of our training skills and contact us for a free discussion!

A specialist can quickly and efficiently get the data protection program up and running. If you need to stay focused on your running business but need data protection compliance a part-time or interim solution might be the best approach for you. Our team understands that you do not need a bureaucratic approach but an effective and lean implementation of data protection that will meet all the requirements. 

Let us help you and be amazed how simple things can actually be in the data privacy world if you bring in the right expertise!

A Data Protection Impact Assessment is a process that helps organizations to identify and analyze the risk of new data processes, new systems or new technology that might impact the privacy of the people involved.

According to the GDPR art. 35 such a Data Protection Impact Assessment (DPIA) is mandatory when the processing involves systemic and extensive evaluation of personal data. Or when sensitive data is processed on a large scale. Another reason to perform a DPIA is when there are monitoring activities on a larger scale.

The best way to do a DPIA is in our view to involve external specialists who can bring in objective view points on how to mitigate possible privacy risks. That way you will comply with the GDPR but at the same time get expertise on how to set up the processing with risk mitigating safeguards.

The GDPR has many different angles and requirements. Specifically for small and medium sized companies it can be hard to get a quick overview of what needs to be done and what the current status is.

Based upon our practical experience in implementing GPDR in several organizations we have developed a simple Quick scan to assess where the potential risks are for your organizations. Bades upon the current set-up a gap analysis can show you a road map plan towards the desired level of data protection.