DATA PROTECTION - GDPR
We assist our clients in matters related to personal data protection, particularly in highly regulated sectors such as healthcare, human resources (HR Data / HRIS), banking, insurance, video surveillance as well as personal data subjects in the context of artificial intelligence (AI).
Our areas of expertise
- GDPR compliance audits (HR, marketing, IT, suppliers, customers)
- Data protection impact analysis (timeliness and implementation) (PIA – DPIA), analysis and documentation of legal bases for processing (Legitimate Interest Assessment – LIA)
- Analysis of data transfers (Transfer Impact Assessment – TIA) and implementation of the necessary documentation for data transfers (BCR, standard contractual clauses, code of conduct, etc.).
- Steering compliance: Updating and drafting the documentation required for GDPR compliance (data protection policies / privacy policy, cookie policy and tracking tools, data processing register, relationship with data processors, WHT, joint controllership agreement, IT charters, etc.).
- Management of data processing issues within a group of companies (Binding Corporate Rules – BCR, standard contractual clauses, qualification of the role of the parties (data controller, data processor, joint controllers)
- Assistance with CNIL (French Data Protection Authority) inspections and applications (e.g. requests for authorization),
- Acting as DPO
- Assistance in framing projects such as Open Data, Blockchain, IoT, video surveillance, geolocation, etc.
- Tailor-made training for in-house teams and raising awareness of the relevant regulatory aspects of data protection, taking into account the nature of your activities