GDPR compliance, meaning, rights

The GDPR (General Data Protection Regulation) is a new Regulation of the EU on personal data protection.

GDPR is not just a law; the Regulation is in force in more than twenty countries and potentially extends its regulatory significance even to those outside the EU who would like to participate in the EU internal market trade.

In addition, the GDPR is a global model of personal data protection, an example of good practice, and is followed by a number of updated national data privacy laws. In other words, even if the GDPR does not apply directly in your country, companies may still face the question of “how to comply with the GDPR” and “how to prepare for the GDPR”.

Interestingly, many outsourcers need a deployed GDPR compliance toolkit. We gladly advise on the GDPR-related matters, prepare the GDPR documents for a website or application, and conduct a GDPR audit. The GDPR service you need may well be available in our portfolio and be described in a separate article. We have a successful experience of handling the GDPR preparation in various fields.

In this blog, we tell a bit more about the GDPR compliance in general, as well as share secrets and build a solid GDPR plan for your case. Ensuring the ongoing GDPR compliance, drafting GDPR documents, and preparing for GDPR with our advice will become an easy and enjoyable experience. Even if you just want to explore the outcomes of your business processes, launch a new GDPR-compliant product, or enter the market covered by GDPR, our blog will be useful for you.

You can learn more about our offer on the GDPR compliance service page.

Dubas Kateryna

IT / privacy lawyer

GDPR technical measures: 5 things to know

GDPR (General Data Protection Regulation) is a regulation aimed to unify and enhance personal data protection in the European Union.  Formally, GDPR is limited by the territory of the EU, but its impact spreads far…

Online GDPR training for the team from DPO. Benefits

Why do companies need to comply with General Data Protection Regulation (“GDPR”) in 2022? Nowadays, most businesses have already realized how important it is to track and follow updates in the field of data protection…

EU Privacy (GDPR) for companies from Canada

Data protection has become an undisputedly important issue for digital businesses. What should a Canadian business know about compliance with privacy laws in 2022? First, privacy legislation in Canada consists of two main acts:  Privacy…

European Data Protection Board has adopted new guidelines: Article 60 GDPR, “dark patterns”

Please click here to read the details. On the 15th of March the European Data Protection Board (“EDPB”) has announced that the following developments were adopted:  Guidelines on Article 60 GDPR; Guidelines on dark patterns…

Is Google Analytics GDPR-compliant? Main issues

Please click here to read the details. What are the main problems? Data transfer to the United States. GA collects data from users all over the world including users from the European Union and stores…

Data Act by European Commission. What does it propose?

Please click here to read the details. Data protection legislation develops very intensively, and the speed of such developments is increasing every year, as personal data becomes more important with the spread of digital technologies. …

WHY and HOW do you need to update your Privacy Policy?

Please click here to read the details.  Data protection has become an incredibly important issue among international businesses, as supervisory authorities are very strict with their fines. Thus, there are various trends on how to…

AdTech and privacy compliance: mission impossible

Why would one need IAB Europe’s TCF 2.0?  Please click here to read the details. Digital advertising agencies and their clients are among those actors most impacted by the data protection laws. GDPR is no…

Guidelines 01/2022 on data subject rights – Right of access

At the end of January 2022, on the official website, the European Data Protection Board (EDPB) published “Guidelines 01/2022 on data subject rights – Right of access”. It is supposed to promote common understanding of…

CPRA for business: why the CCPA is not enough

As you may already know, the U.S. is a federalist state. It means that, except the federal-level legislation, each State has its own corpus of laws and regulations that are intertwined (complementary, and often contradictory…