WE ARE FUSION LAW
The General Data Protection Regulation…
The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is in force from 25 May 2018.The GDPR applies to all organisations and strengths the rules in relation to the protection, storage, consent and use of all data.
Non- compliance can result in administrative fines up to EUR 20,000,000 or, in the case of an undertaking, up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher.
Therefore, it is crucial that your business is GDPR compliant before the regulations become effective. This means updating all of your Company contracts, employment contracts, commercial contracts, handbooks, policies and agreements.
Our lawyers have extensive GDPR knowledge and are able to help you with all your GDPR requirements or questions.
Our comprehensive GDPR Guide summarises the key changes the GDPR and how this may affect your business. It also provides a checklist of matters you will need to consider to ensure that your business is compliant.
GDPR Audit
The GDPR is a vast and expanding area and is likely to mean that you are required to change many of your current practices and policies. We know that this can be overwhelming for a business and so our aim is to simplify the process for you. Our GDPR Audits are targeted and deliver you a comprehensive assessment and report actions that you can start to address as soon as the Audit is complete. These include cultural, structural and practical changes .We will attend your business to carry out a detailed assessment of your current practices and provide you with a complete document of the changes that you are required to make and how to ensure that your business is GDPR compliant.
The GDPR has been implemented to address, amongst other things, changes in technology and how data is processed using technology. As such, we also work closely with out in- house IT team to ensure that your technical processes are GDPR compliant and provide you with advice on technical changes you may wish to make to make your processes more efficient.
GDPR Policies
An integral part of the GDPR is to ensure that you have appropriate documentation and records of your data protection practices. This is to ensure that Data Subjects (those whose data you control and process) are fully informed of the types of data you hold about them, how this data is protected, whether it is transferred to any third parties (in or outside Europe), the reasons for controlling and processing their data and how long you intend to retain their data.
The GDPR Policies we draft are based on the responses you provide us in the GDPR Audit. See our section on GDPR Audit. The GDPR Policy is therefore tailored to your business whilst ensuring all the legal obligations have been met and recorded. It ensures that your business meets your compliance requirements by being transparent and accountable.
We are also able to draft your GDPR compliant Privacy Policy and Cookie Policy and terms and conditions to provide with any third parties that you contract with.
Disciplines
Click to expand and find out how we could help your company in this area
GDPR Audit
The GDPR is a vast and expanding area and is likely to mean that you are required to change many of your current practices and policies. We know that this can be overwhelming for a business and so our aim is to simplify the process for you. Our GDPR Audits are targeted and deliver you a comprehensive assessment and report actions that you can start to address as soon as the Audit is complete. These include cultural, structural and practical changes .We will attend your business to carry out a detailed assessment of your current practices and provide you with a complete document of the changes that you are required to make and how to ensure that your business is GDPR compliant.
The GDPR has been implemented to address, amongst other things, changes in technology and how data is processed using technology. As such, we also work closely with out in- house IT team to ensure that your technical processes are GDPR compliant and provide you with advice on technical changes you may wish to make to make your processes more efficient.
Data Protection Officer Support
Depending on the nature of your business and the type of data you process, it may be mandatory for you to appoint a Data Protection Officer.
However, we believe that given the strategic, financial and reputational importance of ensuring that you have a compliant approach to the handling of personal data in your business, it is likely that you will decide to appoint a Data Protection Officer nevertheless.
You may wish to appoint a current employee within your business or make a full- time appointment. Whatever you wish to do, we are able to provide you with ongoing or one- off support and training for the Data Protection Role. Alternatively, we are able to act as your outsourced Data Protection Officer for your business, regularly reviewing your practices and procedures to ensure that you are GDPR compliant and handle any issues or complaints that may arise.
GDPR Employment Policies
As well as your customers/ clients/ patients, it is also important to remember that you will also hold data relating to your employee’s. You will therefore be required to ensure that you have an Employee GDPR Policy in place illustrating your cultural, structural and practical compliance with the GDPR.
Our Employment Law lawyers are able to provide you with full Employee GDPR support including advice, policies and guidance.
GDPR Policies
An integral part of the GDPR is to ensure that you have appropriate documentation and records of your data protection practices. This is to ensure that Data Subjects (those whose data you control and process) are fully informed of the types of data you hold about them, how this data is protected, whether it is transferred to any third parties (in or outside Europe), the reasons for controlling and processing their data and how long you intend to retain their data.
The GDPR Policies we draft are based on the responses you provide us in the GDPR Audit. See our section on GDPR Audit. The GDPR Policy is therefore tailored to your business whilst ensuring all the legal obligations have been met and recorded. It ensures that your business meets your compliance requirements by being transparent and accountable.
We are also able to draft your GDPR compliant Privacy Policy and Cookie Policy and terms and conditions to provide with any third parties that you contract with.
Monthly GDPR Support
The law surrounding the GDPR is currently very new and extent of the requirements for businesses under the GDPR is unknown. Following the GDPR’s implementation, there is likely to be much case law produced surrounding this area and resulting updates to the law to clarify current unknowns. You may, therefore, be required to regularly review and update your policies and procedures to ensure that you maintain compliance.
As such, we provide monthly GDPR support to regularly review and update of the GDPR Audit and GDPR Policies. We also provide an advice phone line whenever required (during office hours) to support your Data Protection Officer with their duties on an ongoing basis and whenever required, draft Data Protection Impact Assessments when required and are able to advise you any data breaches that may occur.
How can we help?
If you want to find out how we can help you, or if you have any enquiries, contact us and we'll be in touch
Contact Us