Permanently comply with all legal requirements and guidelines
Compliance with all legal privacy requirements and guidelines is not a one-off project, but a permanent process. A journey that every organization must take in order to be able to permanently comply with the basic principle of the GDPR: accountability. DPO Consultancy guides you through every step of that journey.
Every privacy journey needs a starting point. Only when you know where you stand will it become clear what measures are needed. During an annual assessment, it is thoroughly tested to what extent your organization meets the requirements of the GDPR. In addition to studying all documentation, all relevant stakeholders are interviewed. All findings are translated into clear points for attention and action. DPO Consultancy is the ideal partner for an independent and professional assessment. Our experienced privacy experts are aware of all current laws and regulations – national and international – and master all aspects of a good privacy and data protection policy.
How do you do that, implementing privacy management? By translating the findings and recommendations from an assessment into a privacy management activity plan (PMA plan). This plan ensures that the measures required by the GDPR are anchored in a structured and manageable manner in business operations. The scope, depth, and content of the necessary measures are of course different for every organization, depending on services, business operations, industry, and region. Our consultants have experience in all kinds of industries and with various types of organizations, so implementation advice is always tailored to your situation.
“The privacy journey helps you to truly anchor privacy and data protection in your organization. So that it does not feel like an obligation, but rather as a distinguishing factor for your company.”
Jelmer Pieters – Managing director – MBA CIPP/E
The Schrems II judgement and new standard contractual clauses
Step by step data breach protocol
The GDPR, what does it mean for non-EU companies?