Regulation · General Data Protection Regulation
GDPR
The EU’s data protection law. It reaches businesses anywhere in the world that offer services to, or monitor, people in the EU.
Overview
What is GDPR?
The GDPR governs how personal data of people in the European Union is collected, used, stored and shared. It reaches well beyond Europe: if you offer services to people in the EU, or process their data for customers who do, it applies to you.
Who needs it
- Businesses with customers or users in the EU or UK
- Data processors handling personal data for European customers
- Companies preparing for enterprise due diligence in Europe
What’s involved
The path to GDPR.
- 01
Map your data
Records of processing activities: what data you hold, why, where it goes and how long you keep it.
- 02
Lawful basis and transparency
Clear privacy notices and a documented lawful basis for each processing activity.
- 03
Data subject rights
Processes to handle access, correction, deletion and portability requests on time.
- 04
Processors and transfers
Data processing agreements and safeguards for international transfers.
- 05
Risk and breaches
Data protection impact assessments where needed, and a tested breach response procedure.
How we help
We carry the documentation. You bring the decisions.
One program, built around your business, mapped to every framework you need.
- GDPR gap assessment for controllers or processors
- Records of processing and data mapping
- Privacy policies, DPAs and internal procedures
- DPIA support and breach response planning
- Alignment with ISO 27001 and SOC 2 controls
Ready to start on GDPR?
Tell us where you are and where you need to be. We will spend 30 minutes understanding your situation and give you an honest view of the fastest sensible path.