GDPR (AVG) services

Privacy obligations are piling up

The GDPR is no longer a new topic, but many organisations still struggle with it on a daily basis. New systems, integrations with suppliers, marketing campaigns and data projects keep creating new challenges. There is often a policy in place, but it is unclear whether it is up to date and correctly applied in practice.

You are increasingly faced with extensive privacy questions, contractual obligations and the expectation that you can show explicitly how you protect your data. Regulators set the bar high, and fines and reputational damage following incidents are real. That calls for a structured GDPR approach, so that it becomes a manageable part of your organisation.

What our GDPR (AVG) services bring you

Our GDPR services help you get privacy in order not only legally, but organisationally and technically too. We combine legal knowledge with knowledge of processes, IT and information security. That means we look not only at “what has to be on paper”, but above all at how your organisation actually works.

Among other things, we offer:

• GDPR compliance checks — We make a level-headed baseline measurement: which obligations apply to your organisation, what have you already arranged and where are the gaps? This results in a concrete improvement plan, with priorities and quick wins.
• Implementation of a GDPR framework — We help set up or tighten up policy, registers and processes around privacy. Think of processing registers, procedures for data subject rights, data breaches, DPIAs, retention periods, contract management and privacy by design.
• GDPR audits — We test whether policy and agreements are also complied with in practice. That gives insight into where you are compliant, where adjustment is needed and which measures you can demonstrably show to clients and auditors.
• DPO-as-a-Service — If you need a Data Protection Officer (Functionaris Gegevensbescherming), or a privacy officer, but do not want to set up a full-time position, we provide an external DPO. They supervise, advise, report and act as the point of contact for regulators and data subjects.