GDPR Audit

Based on the results from the GDPR GAP Assessment, we will clearly outline any further steps/opportunities needed for GDPR accountability that arose from the GAP Assessment. This often includes but not limited to:

• Assess existing policies and where required design policies to manage and mitigate risk. You will receive updated policies including data subjects’ rights and firms’ obligations.
• Advise that direct marketing activities (if carried out) are in line with GDPR requirements and PECR
• Advise that all employees receive appropriate data protection training.
• Further assistance with a data retention schedule and policy (customer and employee data) your business needs to be aware of how long data should be kept based on either regulatory bodies or your firm’s business justifications.
• Further assistance with data mapping – your business needs to understand how much personal data is retained and where/whom that is stored/shared with.
• Further assistance with GDPR Technology to examine what security measures must be in place to protect the data and any other arrangements most companies outsource IT however, from a GDPR Accountability viewpoint there needs to be evidence that appropriate security and organizational measures are in place.
• Further assistance with GDPR HR requirements – drafting employee and recruitment privacy policies if required.
• Drafting of data processor agreements and structures in place to ensure international transfer compliance.

We aim to work closely with you to comply with GDPR and ensure all opportunities for improvement are attained.

GDPR needs to be consistent and not treated as a once off project. Your business needs to stay up to speed with annual training and ensure your business knows how GDPR will impact your employees and your customers. Fines can be imposed therefore your business needs to assess the cost of implementation versus a potential fine.