Data Privacy & Technology

With cyber-attacks and data fraud currently ranking as the third and fourth most serious sources of global risk, data truly might be more valuable than oil. Weak data privacy and lax cyber-security are no longer an option going forward.

It is no exaggeration to state that being proactive about these matters is a prerequisite to long-term business viability.

The EU’s General Data Protection Regulation (GDPR) imposes strict minimum data privacy and security standards on a diverse range of business interests, requiring ‘data protection by design’ over a multitude of personal data processing activities. Compliance with the GDPR’s elevated personal data privacy and security framework is mandatory not only for EU-based businesses handling EU and non-EU citizens’ personal data but also for non-EU businesses handling EU citizens’ personal data.

Our firm can assist clients by

• Delivering tailored legal advice on specific GDPR queries
• Preparing GDPR Compliance Audit Reports for websites or apps
• Devising effective data processing strategies and advising on data breach reporting obligations
• Preparing tailored, GDPR-compliant documentation such as

• Binding Corporate Rules (BCRs) and Standard Contractual Clauses (SCCs)
• Data Processing Agreements
• Data Protection Policies
• Consent forms
• Privacy Policies and Cookie Policies
• Data Retention Policies 
• Notifications of processing activities

Our long-standing collaboration with an established cyber-security agency means we can also ensure our clients’ full technical compliance with the GDPR’s data security requirements by facilitating, among other things, the preparation and delivery of multi-layered Information Security Policies and the conduct of Cyber-security risk assessments.