Data Protection and Compliance

Privacy and Data Protection

The area is focused on ensuring the client a solid structure of a privacy program in light of the General Data Protection Act (LGPD) and the European General Data Protection Regulation (GDPR). For this, the team realizes interviews with the management and management level, analyzes the main documents of the company to understand the functioning of the own governance of the institution to extract a diagnosis. From there, we have designed a specific compliance plan for each company, taking into account its peculiarities and challenges. After this stage, we work on document analysis of critical sectors of the company and propose the creation of new internal policies. The team also conducts training for the effective implementation of designed solutions, with training for management staff and those who will deal directly with data protection, such as the Data Protection Officer. Our team also has the expertise and certifications necessary to provide the DPO on demand service. 

Compliance

On the compliance side, we structure compliance programs for organizations in various economic sectors. The focus is to improve the company's culture in terms of integrity and compliance, ensuring the creation of an independent reporting channel that guarantees anonymity to stakeholders. We start this consultancy with interviews to detect the maturity of the organization in compliance and then we do a risk analysis in compliance. From this point on, it is possible to create a specific instance for the performance of compliance, always with the support of senior management, creating and improving the company's internal policies and training the employees according to these innovations. Our team can also be hired for specific structuring such as code of ethics and determined executions in training, corporate investigations and timely audits.

Some of the deliveries in the area are:

1. Diagnosis to detect the maturity of the company in data protection or compliance with delivery of program creation calendar;
2. Structuring of privacy and compliance programs;
3. Corporate risk analysis with focus on data protection and compliance;
4. Communication and training on governance, data protection and compliance;
5. Mapping of personal data and framing according to the legal bases (own methodology);
6. Analysis and adequacy of employment and business contracts with regard to compliance and data protection;
7. Elaboration of privacy policy, term of use and cookie policy;
8. Elaboration of information safety policy;
9. Development of incident management policy;
10. Elaboration of other internal regulations of personal data protection and compliance as Code of Ethics and Corporate Risk Management Policy;
11. Assistance in the appointment and training of the Data Protection Officer (DPO);
12. Assistance in the preparation of the Personal Data Protection Impact Report;
13. Outsourced DPO services on demand;