Satisfying Subject Access Requests can require a very significant amount of time and effort....
Privacy & GDPR Services
GDPR came into force on 25th May 2018. Mazars has supported many organisations attain GDPR compliance. We will continue to provide support to our clients in refining and maintaining compliance as the regulatory and legal environment matures.
Mazars are the market leading provider of Data Protection Impact Assessments and Privacy Impact...
Mazars provides outsourced Data Protection Officer (DPO) services to organisations that do not...
Many organisations that will require a DPO will not be able to attract or justify paying for an individual that meets the capability and seniority requirements. We can provide a DPO service to overcome these issues
Satisfying Subject Access Requests can require a very significant amount of time and effort. Gathering the data, filtering out the irrelevant records, making decisions on what is necessary to include and redacting information appropriately can turn one SAR into a project in its own right.
Where there is a high risk to the privacy of the individual from a changed business model or use of data, it will be necessary to complete a DPIA / PIA. We are leaders in Ireland and Europe in providing these services.
Generally, organisations are taking a risk based approach to GDPR. As such they may not be fully compliant with all aspects of GDPR from May 2018. Becoming compliant will continue to be a requirement for organisations. Guidance from the European Data Protection Board, will refine our understanding of what is compliant and drive operational changes.
Responding to Regulation and Case Law
We do not yet know how the regulation will be applied and interpreted by either regulators or the courts across Europe. Based on the application of the law it will be necessary to update policies and procedures of organisations.
Achieving Accountability, Risk assessments & Compliance Reviews
Assessing and testing compliance is an ongoing requirement of the GDPR and especially relevant as the regulatory interpretation unfolds
In the event that the worst does occur, stopping the breach, identifying the impacted data subjects, assessing the impact and required response is critical.
Most organisations have chosen to minimise the technology investment that they will make for the May 2018 deadline. In the medium term, technology enablement will be required to reduce the cost of compliance. We support organisations in identifying, procuring and implementing these technology solutions.
Privacy and GDPR Training
Training staff is critical to compliance. We have a suite of training material focused for specific audiences and updated to reflect how the GDPR is being interpreted across Europe. Our experienced consultants will support delivery of the training or customisation for delivery through a learning management system.
Developing Internal Control Models for Privacy
May 25th 2018 is day 1 for GDPR compliance. Ensuring ongoing compliance will demand an appropriate and effective control model. Mazars can support delivery of the necessary model.
The GDPR encourages the development of certification standards that will allow organisation to clearly demonstrate to stakeholders that they are compliant with the regulation. Mazars are working with compliance bodies to develop and implement such certifications.Meeting the Regulation’s requirements and protecting data subject’s rights is a challenge that faces every organisation. Mazars offers a range of Privacy consultancy and Data Protection advisory services to assist you in identifying, planning for and meeting your Data Protection obligations.
Data Protection News
Mazars Data Protection Newsletter - Issue 5
When the GDPR came into effect on May 25th, 2018, it was clear that significant fines were designed to make non-compliance a costly mistake for organisations.