Data Complied – Data Complied

About us

By partnering with data complied

Our consultancy services assist business, understand how the law, technology and innovation can be applied in digital economy.

Our guidance, training, and advice are focussed to strengthen and secure compliance, ensuring privacy and security for your business.

Empower your team members and provide confidence through ongoing-mediated support, leading to best outcomes in terms of revenue and gaining investor confidence.

Tailoring your business requirements through data-complied assistance, and minimise the risk of potential fines for data protection breaches.

Services

GDPR Readiness Gap Analysis

Data collection, processing and transit business practices and identify key area that require further privacy compliance

GDPR Strategy Implementation

Implement organisational business structure to strengthen confidence with compliance and privacy

Privacy Impact Assessments

Helping prepare 'Privacy Impact Assessment' reports to underline the legal requirements

External Data Protection Officers

Outsourcing qualified DPO experts as per the business and legal needs of the clients

Lawful Basis And Transparency

Provide data protection services for law and transparency data collection, retention processing and refining.

Cookies

Guidance on ePrivacy Directive which was nicknamed ‘the 'cookie law’ as it prompted organisations to introduce cookie walls, for privacy/ confidentiality

Training For Organisations

- GDPR
- CCPA
- HIPPA
- BREXIT

Health Care Professionals

Training medical professionals to use personal health data for medical diagnosis, and better management, improving quality of healthcare

Coders/Developers

Training coders and developers on “Privacy by Design” and ensure data protection through technology design

FAQ

What is the GDPR?

The General Data Protection Regulation is a European Union law that was implemented May 25, 2018, and requires organizations to safeguard personal data and uphold the privacy rights of anyone in EU territory. The regulation includes seven principles of data protection that must be implemented and eight privacy rights that must be facilitated. It also empowers member state-level data protection authorities to enforce the GDPR with sanctions and fines. The GDPR replaced the 1995 Data Protection Directive, which created a country-by-country patchwork of data protection laws. The GDPR, passed in European Parliament by overwhelming majority, unifies the EU under a single data protection regime.

Does the GDPR require encryption?

The GDPR requires organizations to implement “appropriate technical and organizational measures” to secure personal data and provides a short list of options for doing so, including encryption. In many cases, encryption is the most feasible method of securing personal data. For instance, if you regularly send emails within your organization that contain personal information, it may be more efficient to use an encrypted email service than to anonymize the information each time.

What are the GDPR fines?

The GDPR allows the data protection authorities in each country to issue sanctions and fines to organizations it finds in violation. The maximum penalty is €20 million or 4% of global revenue, whichever is higher. Data protection authorities can also issue sanctions, such as bans on data processing or public reprimands.

Who must comply with the GDPR?

Any organization that processes the personal data of people in the EU must comply with the GDPR. “Processing” is a broad term that covers just about anything you can do with data: collection, storage, transmission, analysis, etc. “Personal data” is any information that relates to a person, such as names, email addresses, IP addresses, eye color, political affiliation, and so on. Even if an organization is not connected to the EU itself, if it processes the personal data of people in the EU (via tracking on its website, for instance), it must comply. The GDPR is also not limited to for-profit companies.

How do I comply with the GDPR?

Organizations can comply with the GDPR by implementing technical and operational safeguards to protect personal data they control. The first step is to conduct a GDPR assessment to determine what personal data they control, where it is located, and how it is secured. They must also adhere to the privacy principles outlined in the GDPR, such as obtaining consent and ensuring data portability. You may also be required to appoint a Data Protection Officer and update your privacy notice, among other organizational measures.

What is a Data Protection Officer?

A Data Protection Officer (DPO) is an employee within your organization who is responsible for understanding the GDPR and ensuring your organization’s compliance. The DPO is the main point of contact for the data protection authority. Typically, the DPO has knowledge of both information technology and law.