With the General Personal Data Protection Law – LGPD, no. 13.709/2018, enacted in Brazil on August 14, 2018, companies need to adapt their activities to serve their customers, as data subjects. The orientation is to prevent failures and illegalities in the treatment of data, creating a safe environment for the holders. For this, many companies are counting on the GDPR consultancy, which develops a basic structure for the implementation of the Law, with the objective of implementing and guiding the management of those involved.
It GDPR consultancy, is basically carried out in three main stages, the first stage being responsible for verifying the processes that involve the processing of personal data in the organization. At that moment, the GDPR consultancy verifies compliance and non-compliance with compliance with legal criteria, as well as related risks. They also guide the choice of the DPO (Data Protection Officer), a position legally created to be in charge of data protection issues.
The next step of GDPR consultancy it is the adequacy, that is, the improvement of processes and the development of the action plan, which will guarantee the monitoring of the data life cycle. THE GDPR consultancy
tests, in this step, the situations created by the information that was collected and document the adjustments, also guiding the deletion of unnecessary data and how to conduct third-party management.
The last and third stage of GDPR consultancy refers to management and is responsible for the operation of processes and risk management. The focus of this entire process is on the security of the management of personal data and on ensuring the continuity of compliance with the criteria of the LGPD and ANPD (National Data Protection Agency), the body responsible for inspection, initiation of administrative proceedings, application of fines and of editing technical norms of conduct.
Get in touch with TATICCA – ALLINIAL GLOBAL, which has a qualified and experienced multidisciplinary team, tools and methodology to consulting on LGPD and also implementation, in an objective and assertive way, with: guidance and training, diagnosis, analysis of employee contracts, analysis of supplier contracts, analysis of internal policies, analysis of contracts for the provision of services or sale of products, adaptation of contracts serving LGPD, data mapping, implementation of the service channel, elaboration of a privacy policy, pre-formatted documentation with all the requirements of the LGPD.