Personal Data Protection

GFP Legal provides comprehensive legal advisory services with regard to personal data protection for businesses and public authorities. In particular, we help our clients prepare for the changes in personal data protection connected with the entry into force of the new EU regulations (GDPR).As part of our support for the clients in terms of GDPR we assist i.a. in the following matters:

  • we conduct audits in order to check the clients’ compliance with the new regulations,
  • we help determine the details of data processing, i.e. what kinds of data, in which business processes and with the use of which assets are processed in the clients’ organizations,
  • we advise how to approach the risk assessment in terms of data processing and recommend measures which may eliminate or minimize risk,
  • we support the clients’ in drafting the necessary documentation,
  • we take over the role of data protection officer (DPO) in the clients’ organizations (outsourcing).

For clients, who have implemented GDPR, we provide our support i.a. in the following matters:

  • interpretation of GDPR, in particular with regard to guidance or guidelines issued by the European Data Protection Board or the President of the Personal Data Protection Office,
  • responding to a data subjects’ requests,
  • making relevant notifications to President of the Personal Data Protection Office or notifying a data subjects within the extent required by GDPR,
  • creating new business processes, which can include data processing, in order to ensure compliance with GDPR,
  • inspections conducted by the President of the Personal Data Protection Office,
  • ongoing advisory with regard to some other issues in the field of data protection,
  • conducting trainings in the field of personal data protection,
  • outsourcing of the role of data protection officer (DPO), which can be performed by an appointed lawyer in client’s organisations.

We also support our clients in the proceedings before data protection authorities and in the course of inspections conducted thereby. We guarantee, that cases will be managed by an experienced lawyer qualified as an attorney-at-law.

While providing legal services concerning personal data protection we cooperate closely with IT specialists and security experts to ensure that our clients receive comprehensive support.

You can count on us

  • We help entrepreneurs to implement and interpret GDPR regulations.
  • We provide legal support in the course of inspections conducted by data protection authorities.
  • We take over the role of data protection officer (DPO) in our clients’ organizations.