Data protection law is being redrafted by the regulation. Many new duties have been added and the liability framework significantly tightened. The own, operational data protection officer (if there is one) is often overstrained in the number of necessary, legally very complicated implementation measures. In addition, the company is liable for its misconduct, as the employee can only be claimed under liability law in exceptional cases. We specifically support the preparation and implementation of the EU GDPR by monitoring and documenting the screening of existing processes in personal data processing. Liability will not be accepted.

First, we record the current data protection status in your company and compare it with the new requirements of the ordinance. You will then receive a list of measures to be implemented in the company, which will be coordinated with the responsible authorities. With our support, the measures are then gradually implemented and controlled within the company. Such a process takes a few weeks for small companies and several months for large corporations. The aim is to have all implementation measures completed by the date of application of the Regulation on 25 May 2018 in order to avoid impending fines for your company..

The implementation process must run inside the company. We support the responsible departments in the company with knowledge, documents and advice. The latter is reduced to consulting in IT processes (collection and processing of personal data); Legal advice in individual cases does not take place. However, we are aware of the legal requirements, which is why all information and documents provided by us were previously checked for legal compliance. For individual legal questions, we assist with the clarification of your own lawyers or mediate to specialized IT and data protection lawyers.

Of course, the costs involved depend on the size of the company and the extent of personal data processing. For a small / medium sized business with up to 30 employees and normal IT use (not an online business), 2 person days are often sufficient to assist in implementing the regulation.

After a thorough study of the EU GDPR with regard to legal texts, data protection law and implementation of the guidelines in practice, we can implement the requirements for the preparation, implementation and completion phase (including notifications to the authorities) in your company in a very practical and understandable way.