GDPR represents the biggest change in processing and storing personal data of EU citizens in Internet era.
It was approved by the European parliament on 14th of April 2016.
By 25th of May 2018, all companies and organizations that utilize or store personal information of EU residents will be required to have established GDPR compliant environment to process personal data. This will include EU based companies, but also all companies (not based in the Union) but operating with personal data of EU citizens.
One of the main goals is for data subjects to have more rights on how their information is used, controlled, processed, shared and deleted. Another important part of the Regulation is the implementation of the needed IT security measures for personal data protection.
Organizations which are found in breach will face significant penalties of up to 4% of annual global turnover or €20 million whichever is greater.
Businesses that will be subject of GDPR include (but not only):
- Financial institutions
- Accounting companies
- Hotels
- Each company that has a HR department
- ISPs
- Lawyers
- Notary companies
- Recruitment agencies
- Private medical institutions and medical/dental practices
- Taxi companies with web applications requiring personal data fulfillment
- Online shops
- Logistics companies
- Call centers
- Businesses issuing warranty cards for products
- Credit companies
- Insurance companies
- Tour operators
- Tourist agencies
- Architecture and design companies
- Building companies
- Security companies
- Private schools
We strongly encourage any business unit affected by this regulation to start this process as soon as possible since it might take several months to achieve compliance!
Our company can provide high quality professional support and help you bring your data under control and establish the processes needed to achieve GDPR compliance.
The experience of our team in IT Information Security, Internal Audit, Risk governance collected for more than 10 years in multinational financial institutions will add assure or add more value to your company Data privacy program.
Working together with our strongly experienced jurisdictional team can we can provide holistic approach and assure your business will meet the requirements of GDPR.
Our services include:
- Business processes gap analysis and data inventory audit to allow you to quantify your personal data holdings and what needs to be done in terms of compliance requirements.
- Providing you the needed jurisdictional procedures and rules in order to comply with GDPR.
- Risk assessment.
- Privacy impact assessment.
- Implementation of the required IT solutions.
- Register of the activities subject of GDPR.
- Business continuity plan.
- Consultancy and planning regarding GDPR.
- Data Protection Officer as a service in order to meet the GDPR requirements.
- Our Information Security Managed Services will provide you the assurance that your personal data is under the protection of our systems for monitoring and registration and reaction in case of security incidents.
- Face-to-face training and e-learning capabilities will provide your staff with sufficient knowledge to understand their individual GDPR responsibilities.
Since lots of the GDPR activities require onsite visits at the moment we operate in Varna, Shumen and Dobrich.
