Areas of practice

Data protection and information society services

  • Initial analysis of the situation in order to understand the degree of adaptation needed to the regulations in force.
  • Risk analysis of the data processing carried out.
  • Drafting of policies and procedures, among others, related to: (i) consent from the data subject; (ii) exercise of rights of data subjects; (iii) providing prior information to the data subject; (iv) impact assessments; (v) records of processing activities.
  • Design and implementation of policies and procedures, Drafting of informative clauses for interested parties.
  • Due diligence of managers and/or assignees.