If you offer services to people in the EU or process their data on behalf of European clients, the General Data Protection Regulation applies to you — wherever you are based.
We assess your processing against GDPR, help you document it properly and put the controls in place that clients and regulators expect.
Objectives
- Establish lawful bases and records of processing activities
- Review data-subject rights, retention and international transfers
- Assess security of processing and breach readiness
- Prepare data processing agreements with clients and vendors
Methodology
01
Assess
- Gap assessment against GDPR articles
- Review of records of processing and transfer mechanisms
02
Remediate
- Policies, notices and DPAs
- Rights-request and breach procedures
03
Sustain
- Staff training
- Periodic compliance reviews
Deliverables
GDPR gap assessment
Records of processing activities
Privacy notices and DPA templates
Compliance roadmap