Source: https://www.grcilaw.com/product/gdpr-data-privacy-manager-service
Timestamp: 2019-10-14 10:16:12
Document Index: 327985998

Matched Legal Cases: ['Art. 39', 'Art. 39', 'Art. 39', 'Art. 39', 'Art. 39', 'Art. 38']

Data protection support for GDPR compliance | GRCI Law
GDPR Contract & Legal Services
GDPR support for DPOs
A flexible data protection service for organisations that are not required to appoint a DPO (data protection officer) but want EU GDPR (General Data Protection Regulation) support.
Data protection support for GDPR compliance
Even for those organisations who aren’t required under the Regulation to have a Data Protection Officer, it’s still essential to have solid advice and support from someone with a data protection background. Finding someone for an in-house role with the right expertise has become exceptionally difficult since the Regulation came into effect.
Our GDPR Data Privacy Manager Service is for organisations that need extra data protection support. Our team consists of experienced data protection lawyers and consultants with the breadth and depth of knowledge required to offer advice and support on the complexities of the GDPR.
This service is available either in pre-purchased hours, or as an annual subscription depending on the needs of your organisation. Speak to one of our experts for more details.
Our team will be on hand to:
Provide virtual advice and guidance to the organisation on GDPR compliance.
Review and advise on privacy policies, procedures and documentation relating to the processing of personal data - Art. 39(1)(a)
Oversee the establishment and maintenance of the personal data processing register (the Article 30 Record) - Art. 39(1)(a)
Advise on the necessity of a data protection impact assessment (DPIA), the manner of its implementation and outcomes - Art. 39(1)(c)
Provide guidance on data breach monitoring, management and reporting - Art. 39(1)(a)
Serve as the contact point for data protection authorities for all data protection issues - Art. 39(1)(d) and (e)
Provide advice and guidance on responses to privacy rights requests from individuals (information, access, rectification, objection, erasure, right to data portability) - Art. 38(4).
Assist clients with information collection to identify personal data processing activities; verify GDPR compliance of the processing activities; provide advice and guidance on compliance best practice
Quarterly report for senior management to ensure corporate governance of the Regulation
GDPR gap analysis and report is a prerequisite for this service
If required, this will be carried out by our sister company IT Governance Ltd.
We would scope out any services required from us before we start working with you because it’s important to get the right service for your needs. In relation to the GDPR, we offer three similar services that differ slightly according to your exact organisation requirements. Find out more by reading our web pages, or speak to a member of the team for a detailed conversation about what you might need.
Data Protection Officer (DPO) as a Service Organisations that are required by the GDPR to have, or decide to appoint, a DPO and need to outsource this role.
Data Protection Officer (DPO) Support Service Organisations that have a DPO in place but would like extra support from time to time.
Data Privacy Manager Service Organisations that are not required by the GDPR to have a DPO but still would like to outsource data privacy support without having the official “DPO” title.
GRCI Law has completed the NHS Data Security and Protection (DSP) Toolkit online self-assessment tool which allows organisations to measure their performance against the National Data Guardian’s 10 data security standards, providing the assurance (to all NHS clients) that we are practising good data security and that personal information is handled correctly. If you process NHS patient data in any capacity, GRCI Law is able to assist you with all your data privacy requirements.
If you need assistance to become compliant with the DSP Toolkit, our sister company IT Governance Ltd offers several options to help you complete this exacting requirement.