GDPR compliance

avatar
Катерина Дубас
Голова практики приватності в Legal IT Group, LLM, CIPP/E, CIPT, FIP
Сontact
We help large businesses entering the EU market and product-based IT companies become GDPR compliant.
GDPR compliance Legal IT Group

Why Choose Us

Experts in GDPR since 2018

We’ve been systematically building and implementing privacy programs since the early days of the GDPR.
  • A Team of Three FIPs

    Certified professionals with CIPM, CIPT, CIPP/E, and CIPP/US credentials — all holding the prestigious Fellow of Information Privacy (FIP) designation
    sircles
  • Privacy Advocates

    We host regular in-person and online events dedicated to privacy and data protection.
    about_icon2
  • Authors of “GDPR for Divers”

    Our in-house lawyers and privacy managers are proud co-authors of a widely respected practical guide.
    about_icon3
  • Connected with German Partners

    We implement the best European privacy practices through close collaboration with trusted German experts.
    about_icon4
Send a request
decor

compliance track – compliance track compliance track – compliance track

  • 01

    GDPR Discovery

    Interviews, questionnaires, and deep dives into your data flows.
  • 02

    GDPR Audit

    We identify compliance gaps and build a practical, effective roadmap.
  • 03

    GDPR Documentation

    Policies, procedures, consents, rules, and clear implementation guidelines.
  • 04

    Ongoing GDPR Support

    We monitor compliance and help initiate the proper actions when needed.

What Do We Offer? What Do We Offer? What Do We Offer? What Do We Offer?

red-folder Data Protection Audit
Documentation
  • Personal Data Flow Map

    We identify the sources of personal data and trace its full lifecycle — from collection to deletion or anonymization.
  • Current State of Your GDPR Program

    We analyze your company’s context, product, stakeholder relationships, vendor ecosystem, data handling culture, and regulatory expectations.
  • Gap Assessment

    We break down how your organization handles personal data and compare it against GDPR requirements and regulator expectations.
  • Action Plan

    We compile all identified gaps and translate them into clear recommendations and step-by-step instructions for building a GDPR compliance program.
  • Website Policies

    We prepare your website’s legal documentation: Privacy Notice/Policy, Impressum/Imprint, cookie banners, and direct marketing policies.
  • Proof of GDPR Compliance

    We create FAQs, blog posts, whitepapers, slide decks, and compliance evidence packages tailored to your audience, from clients to regulators.
  • Data Collection and Transfer

    We draft records of processing activities, legitimate interest assessments (LIAs), transfer impact assessments (TIAs), and data processing agreements (DPAs).
  • Data Subject Rights & Requests

    We develop policies, workflows, response scripts, and request tracking logs to handle access, deletion, and other rights-related requests.
  • Data Protection Impact Assessment (DPIA)

    We provide DPIA templates and guide you through the entire DPIA process for high-risk processing activities.
  • Personal Data Breach + Personal Data Security

    We prepare DPA annexes on security measures, policies and procedures for breach management, and information security policy.
  • Vendor Assessment Process

    We collect information about your contracted vendors and public platform offers, assess their privacy and security posture, and document safeguards and the purpose of the cooperation.
implementation_icon

How is this implemented?

  • Documents in the Dashboard

    implementation_icon1
    We structure the results and link all relevant documents, including the reviewed dates.
  • Dashboard as the Privacy Program Hub

    implementation_icon2
    The dashboard serves as the central hub of your privacy program. It can be used to track ongoing activities and progress over time, as well as document assessments.
  • Team Training

    implementation_icon3
    We provide an online training course for your team, including quizzes. The training is also integrated into your dashboard.
  • Case-by-Case GDPR Support

    implementation_icon4
    Depending on your needs, we are available for ongoing support or can act as your external DPO. This can be arranged separately.

Pricing

€100/hour
The final cost depends on the complexity of data flows and processing mechanisms.
Send a request
Команда

Our Team

Key privacy professionals

From discovery to a fully structured compliance dashboard. What’s included?
  • Катерина Дубас Legal IT Group

    Kateryna Dubas

    Head of Privacy Practice at Legal IT Group
  • Антон Тарасюк Legal IT Group

    Anton Tarasiuk

    Managing partner at Legal IT Group
  • Антон Демчук Legal IT Group

    Anton Demchuk

    Junior IT/Privacy Lawyer at Legal IT Group
  • Дмитро Нефьодов Legal IT Group

    Dmytro Nefodov

    Junior AI/privacy lawyer at Legal IT Group

Certified CCPA/CPRA Experts

We hold certifications in U.S. privacy laws, including CCPA and CPRA.

Our expertise is internationally recognized.

CIPT_Dubas.pdf

Nova Post

International logistics company
  • we provide personal data protection services in Ukraine

  • we provide GDPR-compliant personal data protection services

Viyar

Leading Ukrainian company in the sale of furniture components
  • we helped in building the privacy program and GDPR compliance

Hyalual

Global developer and manufacturer of solutions for aesthetic medicine
  • we provided support with data privacy compliance

Readdle

Product IT company engaged in application development
  • we worked with the Readdle team on their data flow mapping

  • we helped them to add even more transparency to the relationship between Readdle and their customers

Spark

Fast cross-platform email designed to filter out the noise
  • we are honored to act as DPO for Snovio.io

  • we help with other legal issues

Snov.io

Smart automation of cold sales
  • we are honored to act as DPO for Snovio.io

  • we help them with other legal tasks

Trionika

A company for traffic generation and monetization in Western markets
  • we helped with worldwide trademarks and intellectual property issues

ZONE3000

International IT company providing software development services
  • we have provided many consultations on various legal issues

Englishdom

Online school for learning English
  • we helped with solving GDPR compliance issues

WildCraft

Online animal life simulator
  • we act as a DPO

  • we help with other legal tasks

blog_iconCurrent and practical articles

  • Data protection officer
  • AI compliance officer
  • Data privacy compliance
  • Дія.City
  • Digital Millennium copyright Act
  • Торгова марка в IT
Go to Blog

We write about what we practice

IP, GDPR, contracts and disputes, and the legal aspects of implementing technologies such as artificial intelligence or sharing best practices for delivering concrete legal solutions.