35 · Privacy and data security · RGPD · CCPA
Privacy and data security
What assistance changes in this practice, what it does not change, and the time reduction actually observed.
Where the gain is real
Mapping of processing activities, systematic review of processor agreements, checking of transfers outside the Union.
Where it is slight or nil
The decision to notify a breach, meetings with the authority, product trade-offs.
Observed time
−57% at constant case scope, on cases closed over the last three financial years. This measure says nothing about the quality of the outcome.
What the practice covers
- Mapping of processing activities, purposes and retention periods
- Systematic review of processor agreements and of security schedules
- Checking of transfers outside the Union and of the safeguards in place
- Impact assessments and compliance documentation
- Serial handling of data subject requests
- Data breaches: chronology, scope of the individuals affected, notifications