GDPR documentation

GDPR (General Data Protection Regulation) is a European Union regulation that sets out new requirements in the field of personal data protection. The new Personal Data Protection Act came into effect on 25 May 2018, and since that date all obliged entities have had to review and harmonise their information systems and procedures for handling data. Sanctions and fines for failure to comply with the prescribed obligations may reach up to 4% of a company's total turnover or EUR 20 million.

Are you unsure whether the GDPR applies to you and whether you need GDPR documentation? As a general rule, the new Personal Data Protection Act applies, in principle, to anyone who collects and processes personal data. The GDPR applies to companies, institutions and individuals across all sectors (e.g. banking institutions and insurance companies, healthcare, public administration, e-shops, manufacturing and services).

In connection with the GDPR and personal data protection, I provide clients with the following legal services:

• analysis of the current state of personal data processing
• analysis of existing documentation on personal data protection
• analysis of existing consents to the processing of personal data
• identification of your obligations under the GDPR and the Personal Data Protection Act
• preparation of comprehensive GDPR documentation relating to personal data protection (instructions for authorised persons and fulfilment of information obligations towards data subjects, consent to the processing of personal data or obtaining the data subject's consent to the processing of personal data, drafting of a contract between the controller and the processor, etc.)
• representation by an attorney-at-law during inspections and in proceedings before the Office for Personal Data Protection of the Slovak Republic