Data protection and privacy

Data protection and privacy

We provide legal advice and assistance concerning the processing of personal data under Belgian and EU law including:

• Strategic legal advice on the possibilities and opportunities to leverage on data and your digital assets, as well as to build and implement data-centric business models in compliance with applicable data regulation;
• Detailed and practical legal advice regarding your legal obligations as a data controller, data processor or other role within the data processing value chain;
• Data protection priority scans or GDPR Readiness  Assessments to analyse your as-is situation by mapping key  data flows, identify key data protection issues and risks and  propose practical solutions;
• The design & implementation of an adequate data  protection organisation from strategy to execution, based  on a global data protection & privacy programme,  with roadmap, taking into account your business-specific  requirements and ways of working;
• Determining the best approach for your organisation to  transfer personal data abroad and assisting you with the  applicable procedures and formalities;
• Reviewing or drafting your vendor and other business  contracts from a privacy and data protection perspective to  ensure they include the appropriate data processing clauses;
• Advice on privacy and data protection challenges in an HR context including cybersurveillance on the workfloor;
• Support with security cameras’ and video surveillance (notification) requirements;
• Assistance with the preparation of and/or  presence/representation at meetings with your business  relations as well as with (data protection) authorities in the  context of consultations, investigations or other enforcement actions; Dispute resolution or litigation support;
• Project management and/or stakeholder engagement  and information support (board workshops; training &  awareness, …);
• Providing flexible and to-the-point support to the  data protection team eg. by performing data protection  impact assessments (DPIA), prepare data processing records,  drafting data protection contracts, policies or procedures;
• Providing support to the Data Protection Officer  (DPO) in reviewing compliance, handling data subject (access) requests or enforcement actions, providing advice on highly  technical issues, ...;
• The  set-up/roll-out  incident  response procedures   for data  breach notification  requirements taking the client’s organisation’s and the concerned individuals best interest  at heart, as well as guiding the client through an incident, should it occur.