Lorenz – Brussels Bishkek Geneva

Data Protection Compliance/ Audits

Data protection is getting fierce. Data protection authorities are increasingly enforcing the law and individuals are increasingly sensitive to the handling of personal data pertaining to them.

As a result of our work to date, we have developed a body of model-form policy materials and contract documents addressing different aspects of an organisation’s privacy obligations. We have also developed a body of training materials and can offer both on-site and remote training modules for all managers and staff members whose responsibilities include handling personal information.

Through our international projects, we have developed a network of local lawyers around the world with specific expertise in their national privacy and data protection regimes.

Lorenz has particular experience with:

• Drafting online, off-line and universal consumer data collection privacy policies;
• Drafting fair processing notices in order to comply with the information obligations;
• Drafting data transfer agreements and binding corporate rules for international data transfers and advising on the necessary steps to be taken in connection with the adoption, implementation or approval of those tools across jurisdictions;
• Drafting clauses and/or contracts with processors, employees, suppliers and customers;
• Preparing required notification and/or authorisation requests and dealing with the relevant national data protection authorities across multiple jurisdictions;
• Testing and verifying existing security measures; and
• Developing compliance systems to enable clients to manage and maintain data protection compliance and assisting in the subsequent implementation.