GDPR GP Health check Every organisation processes personal data. The EU General Data Protection Bill (GDPR) and the new UK Data Protection Act came into force on 25 May 2018. They promote the importance of data protection and increase the risk of cutting corners on compliance. Failure to comply could cost up to €20million, or 4% of global annual turnover if that is higher. It’s one unwelcome way to trim your bottom line. You need to know how effective your current compliance is. If you are lagging behind, you don’t just need an overview of the new law – you need understandable solutions to get fit to process personal data. This is exactly what we offer at Mills & Reeve. We provide industry leading expertise in an accessible way. We focus on practical steps you can take to get data protection compliance right. We’re not simply going to tell you the consequences of getting it wrong. Our GDPR GP data protection audit and gap analysis highlights areas of non-compliance and helps create a specific action plan to remedy identified gaps in a costeffective way. We don’t over-engineer solutions. We want you to get the maximum from your compliance budget, not drain your resources.
Our service matrix includes: Gap Analysis Workshop Half-day workshop for senior management teams explaining what the organisation will need to do to ensure it is GDPR compliant.
Raises awareness with management teams about the importance of data protection and privacy
Allows questions to be answered in person by an expert
Helps debunk myths about data protection
Encourages knowledge sharing about best practice within your organisation
The GDPR requires all contracts that cover processing of personal data to contain certain mandatory provisions from 25 May 2018 – even if they were entered into before then. We can help amend all your existing contracts to ensure compliance through a manageable process.
Removes an obvious area of non-compliance
Ensures risk is appropriately apportioned
Takes the pain out of the process
Covers employment contract, where consent clauses will no longer be appropriate
Privacy Notice Update
You will have to provide people with more information about what you do with their personal data and why. We can work with you to ensure the right information is relayed.
Helps improve transparency and increase trust
Removes another obvious area of non-compliance
We advise on innovative ways to convey privacy information
Marketing Communications Plan
Reports say the changes in law will see the death of direct marketing. It is not easy to refresh consent lawfully from existing contacts. We can work with you to resuscitate your marketing practices.
Helps you quantify and manage the risk of sending direct marketing messages without adequate consent
Can avoid you having to scrap your existing database of contacts
Health Check Hotline
We can offer immediate access to data protection experts who are happy to take your call and talk through any concerns you might have about compliance with the complex legislation.
Provides a sounding board – enabling you to quickly check your understanding of a legal point
Provides quick access to partners and senior lawyers
A snapshot of our experience Working with a Central Government Department to address certain GDPR issues as part of the national project to replace the supply chain arrangements
Advising a global technology business on its prepa