Data ProtectionNowadays, the issue of personal data protection is particularly relevant, as there is practically no business left that does not handle the processing of personal data (to a greater or lesser extent). Any questionnaires, tests, or even simple electronic forms that just require a user to fill in tick boxes - are considered the processing of personal data, as personal data is not only contact information, but also, for example, information about the interests or preferences of any target audience.
Based on the personal data of its target audience, large companies develop successful marketing campaigns, effectively sell goods and impose additional services on consumers.
Due to large-scale violations of the personal data protection laws, and the illegal use of another's data for personal gain, additional mechanisms and methods for protection of personal data are being developed around the world. Every day, the legislation on the personal data protection is becoming more and more regulated, personal data - more protected, and the responsibility for violating the data processing rules - more severe.
To enhance personal data protection the General Data Protection Regulation (hereinafter - GDPR), approved by the Parliament of the European Union will be in effect as of May 25, 2018. The GDPR is the new, more stringent rules for handling personal data. GDPR will be mandatory not only for companies located in the EU territory but also for foreign enterprises that sell goods or provide services to EU residents or process, store and transmit data of such individuals. The liability for failure to comply with the GDPR requirements is a fine of up to 20 million euros or 4% of the company's annual income. Obviously, compliance monitoring will be as strict as the liability.
Thus, to act in compliance with the GDPR, it is necessary for businesses to get their documents, procedures and policies in line with the new rules.
IPStyle's personal data protection specialists provide the following services:
- development of company's internal personal data protection documents: internal procedure of personal data processing, relevant provisions of employment contracts on personal data, etc.;
- provision of legal opinions (legal advice) and audits on compliance with the legislation regarding the protection of personal data (both Ukrainian legislation and GDPR);
- bringing documents in line with the new requirements for the protection of personal data of EU residents;
- preparation and provision of oral and written legal opinion (legal advice) on sensitive personal data (health, religious beliefs, biometrics, etc.);
- corporate trainings on protection and processing of personal data.
Paraphrasing the popular expression it can be argued that he who owns personal data owns the world. The specialists of the IPStyle team will organize your documents in such a way that personal data possession will be conducted only within legal framework.