Privacy and data protection

To comply with the GDPR, first of all you need to get an overview of which personal data you collect, how you process these and where they are stored. Start with a privacy audit to determine whether your processes comply with regulations. Next, develop a clear privacy policy and make sure all stakeholders in your organisation are aware of their responsibilities. It is important to draw up processor agreements with third parties and have a procedure for reporting data breaches. Our experts can guide you in setting up a compliant policy that suits your business activities.

A data breach requires immediate action to mitigate the damage and to comply with reporting requirements. Put together an internal crisis team that can respond quickly and, if necessary, report the data breach to the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority) within 72 hours. In addition, inform data subjects if the leak can have a negative impact on their data. A clear procedure and well-prepared staff can prevent escalations. We will help you with a roadmap for dealing with data breaches and support you in communicating with regulators and stakeholders, so that you not only comply with the law, but also maintain trust with customers and partners.

Employees play a crucial role in complying with privacy rules and preventing data breaches. It is therefore important to organise regular training sessions and workshops during which they can learn what the GDPR means and how to process personal data securely. Simple guidelines, such as using strong passwords and avoiding the use of unsecured networks, can already reduce many risks. In addition, you can carry out periodic checks and appoint a contact, such as a data protection officer (DPO). We offer practical training and advice to create a privacy culture so that your organisation as a whole contributes to protecting personal data.