Home » Areas and Services » Personal Data Strategy and Management

Strategy and Management Personal Information

The General Data Protection Regulation has meant a change in the management of this matter, now very marked by proactive responsibility and a focus on risk.

The new obligations and requirements that this regulation brings with it, without forgetting others required by national legislation, entail a high degree of experience in this field and in-depth analysis and work on everything related to this fundamental right.

In all privacy management there are three basic pillars. Two of them are normally well identified by companies: the legal aspect and the technological aspect.

At ELZABURU we distinguish ourselves by our extensive knowledge of both aspects, but above all we make a difference by recognizing the immense value of the third of these pillars: knowledge of our clients.

We work fully coordinated with the client, understanding their activity and aligning ourselves with their strategies. This allows us to promote your business processes while providing legal security, improving your image and reputation, increasing your competitive advantage and reducing your risks.

How do we help you?

Projects to adapt to data protection regulations.
Continuous data protection management service. With two modalities: complete or management advice that is carried out internally.
Assessment or analysis of data protection compliance.
External DPO service.
External advisory service to the internal DPO.
Internal training for Data Protection and Compliance managers and employees.
Legal advice on any issues related to data protection.
Defense against claims, both administratively and judicially.
Data Protection Audits.
Data Protection Impact Assessments.

Implementation of Privacy by Design in technological projects or lines of business.
Preparation of Codes of Conduct.
Preparation for obtaining GDPR certifications.
Review/Drafting of data protection clauses/contracts.
Coverage mechanisms for international data transfers.
Risk analysis of data processing.
Evaluations of those in charge of treatment in order to accredit proactive responsibility when choosing a provider.
Data protection due diligence.
Management of security violations, including the evaluation of their severity in order to determine the need to notify the competent authority and communicate to those affected.
Review/Writing of data protection policies and procedures.