Our work with the legislation on personal data began over 20 years ago with the Personal Data Act (PUL). Prior to the introduction of the General Data Protection Regulation (GDPR), advice on data protection, privacy and information security intensified significantly in the form of lecture and training assignments and extensive work with many companies' implementation projects, for example in terms of inventories, establishment of records, policies for various types of processing and data processing agreements. Since the court rulings regarding Safe Harbour and later also Privacy Shield (the Schrems cases), advice often concerns problems regarding transfer to third countries such as the United States, often in connection with agreements on cloud services.
Weregularly assist companies with new issues regarding the processing of personaldata that arise in the business. For example, we can help with the followingtypes of assignments regarding data protection and GDPR:
· Implementation support regarding GDPR.
· Audit to investigate whether your business complies with the rules.
· Preparationof documentation such as data protection and privacy policies, records of processing, data protection impact assessments (DPIAs) and data deletion procedures.
· Review,negotiation and preparation of assistance agreements (DPA).
· Jointpersonal data responsibility agreements, intra-group agreements.
· Data protection issues in connection with outsourcing, cloud services and other IT agreements.
· Advice on transfer of personal data to third countries, grounds and transfer impact assessment (TIA).
· Personaldata breaches, notifications to data protection authorities.
· International projects and need for contacts with law firms with expertise in data protection/ privacy in other countries.
See more information about our advice in related areas:
Contact
We would be happy to discuss the challenges and opportunities you face and explore how we might help. Email us at contact@kinnander.law and we will get back to you.