Our GDPR Services
On 25th of May 2018 the General Data Protection Regulation (GDPR) will be enforced. Some companies in New Zealand will be effected by this new regulation. IISRI has simplified the GDPR requirements and reduced them to the following services to help you.
GDPR applicability
FREE service for companies which contact us before 24'th of April 2018It is crucial to understand whether GDPR applies to your business and on which basis to avoid high fines for non-compliance (up to €20 million or 4% of annual global turnover). IISRI offers an applicability assessment service by conducting one interactive workshop with your key personnel to provide you advice on the applicability of GDPR.
GDPR readiness assessment
IISRI offers a readiness assessment service by conducting interactive workshops, data analysis and interviews with your key personnel. Our certified consultants will guide you through the maze of GDPR and give you a clear picture of your company’s readiness. They will provide recommendations on the next steps you should take to comply with GDPR.
GDPR implementation service
Our technical and legal consultants will work with you to ensure that you meet the GDPR requirements. Depending on your current readiness, this could be as simple as updating your privacy policy, but it can also entail delivering a program of work. The activities range then from data mapping, risk assessment and privacy impact assessment till introducing new procedures, privacy by design and privacy enhancing technologies (PETs).
GDPR independent audit
GDPR requires organisations to demonstrate compliance with the principles of the GDPR. IISRI provides an assurance services in order to validate your compliance and deliver documentation you can share with the relevant data protection authorities. In case IISRI was involved during the implementation of the GDPR requirements, our partner will perform the audit to ensure independency.
GDPR EU representation
GDPR requires companies outside the EU in certain cases to have an EU based representative who serves as the contact person for all issues related to the company’s processing of personal data under the GDPR. He or she must be in a position to communicate effectively with data subjects and to cooperate effectively with the relevant data protection supervisory authorities. IISRI provides you via our partners in the EU a representation service.
GDPR Virtual Data Protection Officer
GDPR requires in certain cases companies to designate a data protection officer (DPO). Tailored to your privacy needs IISRI provides a Virtual Data Protection Officer (VDPO) service. The VDPO will support you by informing, advising, monitoring compliance and acting as your point of contact for the supervisory authority.
GDPR Management Platform
IISRI provides you (and your partners) a secure and ISO27001 certified GDPR management platform (GMP) to capture all your GDPR documentation, audit trails and reporting and share these securely with your representatives and auditors. With GMP you are in control of GDPR.