GDPR
GDPR: technical and organisational measures
GDPR requires not just tidy documents but security measures that actually work. A common gap: the privacy policy is written, yet nobody knows exactly where the data goes or who can access it. My focus is the IT side — systems, access, vendors and processes.
Book a free consultationWho it's for
- You process customer or employee data across several systems and cloud services.
- You're unsure which vendors process your data and where it's stored.
- You have no clear plan for a data breach (the supervisory authority must be notified within 72 hours).
- You're preparing a data protection impact assessment (DPIA) or a customer audit.
What you get
- Data-flow and systems map
- Review of access rights and security measures (GDPR Article 32)
- Technical due diligence of processors (vendors)
- Breach handling and notification procedure
- The technical part of a DPIA
- Practical staff training
Frequently asked questions
How is your work different from a lawyer's?
A lawyer tells you what the law requires and how to document it. I tell you how to implement it in systems and processes. The best results come from working together.
Can you act as our DPO?
I don't currently offer the DPO role, but I can support your DPO on technical matters.
Let's start with a 30-minute call
No commitment. The call is held online.