Data Protection & GDPR

Who the GDPR applies to

The GDPR applies to businesses established in the EU, and also to businesses outside the EU that offer goods or services to people in the EU or monitor their behaviour there.¹ If that describes you, it is worth checking your obligations before a customer, regulator or partner asks.

What we help with

• Privacy notices and cookie policies. Clear documents that tell people what the law requires them to be told when you collect their data.²

• Data protection reviews. A structured look at what personal data you hold, why, and how it is protected, with practical recommendations.

• Records of processing. Helping you prepare and maintain the record of processing activities the GDPR requires.³

• Contracts with service providers. Reviewing the terms you need with processors who handle data for you.⁴

• CCTV. Advice on operating camera systems lawfully, from signage to retention.

• EU representation. Advice on whether a business outside the EU must designate a representative in the EU, and when the exemption applies.⁵

Our approach

We read your actual processes before we draft anything, so the documents describe what you really do.

Sources
1. Regulation (EU) 2016/679 (GDPR), Art. 3(1)–(2)
2. Ibid., Arts. 13–14
3. Ibid., Art. 30
4. Ibid., Art. 28
5. Ibid., Art. 27(1)–(2)