GDPR Implementation and Adaptation Software

Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data was adopted in May 2016 (General Data Protection Regulation or GDPR), regulations from Europe and directly applicable in Spain since May 25, 2018.

The Spanish adaptation of the regulation is reflected in Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights(LOPDGDD) which served as an introduction into the internal legal order of the GDPR with new developments in this regard.

Be prepared for your company’s implementation and adequacy to the GDPR and know the degree of compliance of your entity in data protection.

• GAP analysis and adequacy plan. Review of the degree of compliance of the company with respect to the regulations, determination of the existing gap and elaboration of the action plan to achieve adequacy.
• Definition and elaboration of a risk analysis:GlobalSuite Solutions will propose to the company a risk analysis methodology and the existing treatments will be analyzed.
• Record of processing activities. Preparation of documentation reflecting the activities of the treatment in all the requested aspects.
• Review and update of stakeholder rights care protocols. Inclusion of new and update of the new ones.
• Review of the contracts for the commission of the processing. Update of the clauses for signature with the processors.
• Definition of the Violation Notification Protocol. Definition of the actions to be taken and how to notify the Control Authority.
• Definition of the functions of the Data Protection Officer. Assistance in the appointment and definition of functions and delegations.
• Carrying out the impact assessments (DPIA),for the treatments that need to be carried out GlobalSuite Solutions will help in the elaboration of the same, for its correct documentation and definition of actions.
• Binding Corporate Rules:drafting the rules necessary for transfers in international companies to meet the necessary requirements.
• In-person controls in our clients’ offices. Containing the required security measures at any of their protection levels.
• Drafting of information and confidentiality clauses.
• Adequacy of the website to the Law and the LSSICE. Advice to the CLIENT considered An Information Society Service Provider in accordance with the Law on Information Society Services and Electronic Commerce on the procedures to be followed to adapt their website to the requirements of said Law.

Among the main benefits of an implementation of the General Data Protection Regulation, we can highlight the following:

• Improving your organization’s image
• Improvement in security and management of your company
• Satisfaction of your customers
• Legal defense