Data Protection

The data protection and privacy regulatory landscape can appear overwhelming to a business of any size. Related compliance failures can give rise to significant reputational damage; substantial regulatory fines; claims for damages as well as loss of corporate value. Thus, data protection and privacy compliance constitutes one of the key risk avoidance strategies for companies today.

The EU General Data Protection Regulation (the “GDPR”) came into force on 25 May 2018 and introduced a new intra-union legal framework for privacy and data protection. The GDPR replaced the 1995 Data Protection Directive, which had been transposed into each EU member state’s national legislations. While the GDPR resembles the principles of the 1995 Data Protection Directive, it has some important new key elements.

Our firm helps our clients to navigate this increasingly complex and highly regulated landscape by providing clear and practical legal advice on data protection and privacy law issues. Our services in this area include, undertaking full General Data Protection Regulation (GDPR) compliance programmes; preparing data processing and data transfer agreements; advising on data sharing and exploitation; advising on cyber security breaches; developing and implementing internal privacy and cookies policies; advising on the privacy aspects of insourcing and outsourcing of business activities; supporting and advising our clients’ Data Protection Officers (DPOs) or offering fully fledged DPO services as well as delivering related training programmes for organizations, aiming to create data protection culture amongst their staff and management team. We also frequently undertake related compliance audits within the context of a wider transaction/reorganization such as mergers and acquisitions.

Click here to download our brochure which describes the new key elements introduced by the GDPR; the GDPR’s data processing principles and a high-level step plan that a corporate entity should follow in order to comply with the provisions of the regulation.