Data Protection
The General Data Protection Regulation: a challenge for public and private entities.
The entry into force, on May 25, 2016, of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC of 24 October 1995, presents numerous challenges to both public and private entities and to all agents whose activities involve the processing of personal data.
Although the full application of the Regulation was set for 25 May 2018, the date from which the repeal of Directive 95/46/EC is also considered to take effect, its entry into force on 25 May 2016 dictates the need for adaptation in all aspects altered or introduced by the Regulation. The aforementioned adaptations to systems and models, as well as to companies’ practices for processing and protecting personal data, are currently mandatory requirements dictated by the Regulation in order to safeguard its full applicability by May 25, 2018.
Therefore, public and private entities must ensure that they introduce all the necessary changes into their systems and practices to guarantee full compliance of their data processing with the new provisions of the Regulation by May 25, 2018.
The Legal Support Service for Data Protection comprises:
Training Activities on the Regulation
Human resource development as an instrument of excellence for promoting the development of human capital and ensuring that the entity’s human resources recognize the actions necessary for the company’s performance to comply with the new regulations. This training service on the legal requirements and changes imposed by the General Data Protection Regulation on data processing aims to enable operators to prepare their human resources, both legal and non-legal professionals, to identify internal needs and to plan and implement the tasks appropriate to complying with the applicable legal requirements.
Situation Diagnosis
This service includes holding meetings with the Client and its managers and employees or those responsible for information systems, as well as audits of the systems in use for processing personal data, with a view to identifying needs as well as analyzing and diagnosing the existence of critical points and where it is necessary to implement measures to comply with the Regulation. The service includes the preparation and provision to the Client of a detailed report, in order to allow for adaptations that are deemed appropriate for full compliance with the General Data Protection Regulation;
Monitoring of Data Processing Activities
The Customer support service for data processing activities is aimed at meeting the needs of Customers during the implementation of the adaptation of data processing systems to the Regulation and/or subsequently, by providing a permanent and personalized consulting service to monitor the Customer’s activity, remotely, through a communication channel specifically created for this purpose, or in person. The service may include conducting follow-up audits. As part of the support provided by BAS, assistance may also be offered to the data controller, the data processor, and the data protection officer.
Legal Knowledge with Value
Serving the adaptation to the new rules for the protection of personal data.
