GDPR compliance
Following an audit, Solvoxia supports your GDPR compliance programme from both a legal and an operational perspective, helping you meet French and European data protection requirements.
Achieving GDPR compliance may involve the following actions:
Establishing records of processing activities for the personal data you process, whether as a controller or a processor under the GDPR.
Preparing data processing agreements where your existing contracts with service providers acting as processors, such as telecommunications providers, do not adequately address personal data protection.
Updating employment contracts, internship agreements and similar documents to include the necessary GDPR information, such as individuals’ rights and data retention periods.
Preparing a privacy policy and, where appropriate, an IT acceptable use policy for employees.
Bringing your customer-facing contractual documents, including terms and conditions of sale or service, into compliance, whether used in print or online.
Helping you assess appropriate technical and organisational security measures. This may include engaging a third party to conduct a security audit or reviewing data deletion and archiving arrangements.
Carrying out data protection impact assessments (DPIAs) where the audit has identified a need for them.
Training staff and, where applicable, your internally appointed data protection officer (DPO).
If you would like to take steps towards GDPR compliance following an audit, we can help you meet personal data protection requirements in both your contractual documents and your day-to-day operations.
You may already find answers below to your questions about personal data protection, GDPR compliance or related matters. If not, please contact us. The Solvoxia team is here to help.