Reg. (EU) 2016/679 · L. 4624/2019 - Compliance that works in practice.
Data Protection
Design and operation of compliance programmes, processing agreements, data subject requests and dealings with the Data Protection Authority.
Overview
Data protection is not a one-off compliance exercise; it is a way of operating.
The General Data Protection Regulation, Law 4624/2019 and the legislation on electronic communications apply to every business, regardless of size or sector, and to every new tool, product or campaign that makes use of data.
We design compliance programmes tailored to each client's activity: practical, workable and built into the everyday running of the business. We stand by you from the first design through to the Authority's inspection, limiting legal and regulatory risk and building trust with customers, employees and partners.
Our expertise
- Mapping processing activities, analysing compliance gaps and keeping records.
- Privacy by design: building data protection into the design of new products, applications and tools, in cooperation with the Technology Law team.
- Cookies and electronic tracking technologies, in cooperation with the Advertising Law team on their use in campaigns.
- Policies and procedures: privacy policies, notices and internal procedures that work in practice.
- Data subject requests and breach incidents: handled with prompt response and notifications to the Authority.
- Impact assessments (DPIAs) and legitimate interest assessments
- Data Protection Officer (DPO) services, embedded in the client's teams
- Processing agreements and transfers of data outside the EEA: agreements with processors and checks on the lawfulness of transfers, so that the client is not exposed to a fine or to the processor's liability.
- Cybersecurity: coordination with cybersecurity and IT specialists on technical and organizational security measures.
- Representation before the Hellenic Data Protection Authority, from inspections and complaints to administrative proceedings