Data Privacy
On May 25, 2018, the European Union's General Data Protection Regulation (GDPR) came into effect, introducing an increased demand for the protection of individual privacy. The data protection framework is a complex and comprehensive legal framework that is continuously evolving. All authorities, companies, and organizations based in the EU or processing personal data pertaining to individuals within the EU must adhere to it. Processing of personal data has become an integral part of all operations, including handling data about customers, members, employees, shareholders, or personal data processed in connection with providing services on behalf of others. Therefore, active and conscious data protection efforts can be utilized as a tool within operations to generate business benefits.
Experience
Skarp regularly assists clients with their data privacy, both trough individual cases and through extensive implementation processes.
Process and approach
Our assignments in data privacy include tailored analyses of the processing of personal data and the implementation of GDPR within operations.We work both on our clients' long-term data protection initiatives and ontargeted interventions for specific issues or individual projects. We provideassistance, among other things, in the establishment of procedures, guidelines, policies, informational texts, agreements, and other documentation required to meet the requirements of GDPR.
We also offer customized lectures for our clients’ employees and management teams.
Furthermore, we are able to offer our services in data privacy in connection with due diligence and support in M&A and other transactions.
Our work includes:
- Drafting, reviewing, and assisting in the negotiation of data processing agreements (DPA) and other types of agreements that regulate data privacy
- Analysing and assessing of legal basis for processing of personal data
- Impact assessments and legitimate interest assessments
- Preparation, assessment and review of documentation to fulfill the information requirements, such as privacy policy.
- Support for Data Protection Officers
- Preparation and development of internal policy documents
- Cookies documentation
- Training and Education
