PERSONAL DATA PROTECTION

Entrepreneurs who collect and process personal data as part of their business are required to protect it. Our barristers specialise in personal data protection issues.

A long-term experience and the knowledge of legal regulations at the national and EU level allow us to create effective legal solutions in the aspect of personal data protection in companies and organisations. Our guiding principle isto look for the least onerous measures from the point of view of implemented business processes.

We carry out an in-depth audit of processes related to the processing of personal data in the client’s organisation, followed by the development and implementation of individually designed data protection principles.

The Law Office has relevant experience in the preparation and implementation of procedures and documentation related to the protection of processed personal data in order to ensure compliance with the provisions of Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to processing personal data and on the free movement of such data and the repeal of Directive 95/46 /EC (hereinafter referred to as “GDPR”) (EU Journal of Laws L.2016.119.1), in particular:

• Personal Data Security Policy;
• Information Systems Management Instructions;
• Records of persons employed at the processing of personal data;
• Personal authorisations to process personal data;
• Agreements entrusting the processing of personal data;
• Consent clauses for the processing of personal data and information obligation clauses;
• Confidentiality statements for the employees of the Principal, the Principal’s contractors;
• Register of processing activities;
• Risk analysis for inventoried processing and impact assessment activities;
• Management of personal data breach incidents and correctness of personal data breach incident management;
• Principles of internal audits of the protection of processed personal data;
• The principles of supervision over the physical security of rooms in which personal data is processed.