Privacy

Compliance with the AVG or GDPR privacy law

Are you confident that your organization complies with the GDPR privacy law? The General Data Protection Regulation (GDPR) is a set of rules designed to better protect the personal data of European citizens and safeguard their privacy. This GDPR privacy law has been in force since May 2018. Its impact is enormous. In addition to reputational damage for an organization, there are substantial fines for non-compliance with privacy legislation.

The AVG privacy law applies to all organizations that process personal data, regardless of size. However, organizations of 250 employees generally have more stringent requirements within the AVG privacy law, such as, for example, the mandatory preparation of a privacy statement and processing register and the appointment of a Privacy Officer. However, this may already be true for smaller organizations as well, depending on the type of processing taking place.

Challenges surrounding the AVG/GDPR

Compliance with the GDPR presents various challenges. One of the biggest challenges is safeguarding the rights of data subjects, such as the right to access, correct, and delete personal data. In addition, organizations must ensure that appropriate technical and organizational measures are in place to guarantee the security of personal data. This includes, among other things, performing risk analyses, drawing up a processing register, and (where applicable) appointing a data protection officer (FG).

Another challenge is complying with data breach notification requirements. Organizations must be able to detect, report and handle data breaches in a timely manner. This requires a good incident management process and employee awareness of the risks and consequences of data breaches.

In addition, organizations must consider the international aspects of the AVG/GDPR. This means they must comply with the rules for transferring personal data to countries outside the European Economic Area (EEA). This can be complex, especially if there is no adequacy decision for the country in question.

How can ARC People help?

At ARC People, we understand the complexity of the GDPR and the challenges organizations face in complying with it. We have translated this complexity into a model with 11 relevant themes (known as "building blocks"). Our experts can help you implement the necessary measures to comply with privacy legislation. This includes:

• Performing an AVG/GDPR quick scan to determine your organization's level of compliance.
• Providing advice and support on establishing a processing register and appointing a Privacy Officer.
• Conducting risk analyses and implementing appropriate technical and organizational measures.
• Establishing an incident management process and training employees in recognizing and reporting data breaches.
• Offering advice on the international aspects of the AVG/GDPR and the transfer of personal data to countries outside the EEA.
• Privacy Officer as a service (the co-sourcing/outsourcing of your FG to ARC People.
• Training employees to increase privacy awareness: what do you need to take into account when working with personal data, what to do in the event of a data breach, what are the rights of data subjects, and how should you act if someone exercises those rights?

With our expertise and experience, we ensure that your organization is AVG/GDPR compliant and that your customers' and employees' personal data is optimally protected. Contact us for more information and find out how we can help you - temporarily or on a more ongoing basis - with privacy compliance.