Our tailored services
Need a hand?
– to map your processing operations,
– to establish the current state of your compliance,
– to define and implement appropriate organisational and technical measures,
– or to implement a remediation action plan?
Need one-off expert support?
We can meet your needs with a tailor-made service offering.
Mapping of your data processing operations
Objectives : give you a centralised, up-to-date view of the location and the technical and legal status of your organisation’s personal and health data assets.
Usefulness :
- Control the complexity arising from outsourcing your data processing operations to a large number of players.
- Improve the productivity of the DPO’s work.
- If you have a due diligence process, you can increase the chances of success.
- Be ready to respond quickly to a data protection authority (e.g. the CNIL in France) in the event of an inspection or an obligation to notify a personal data breach.
State of your compliance
Objectives :
- Determine your real challenges in terms of security and protection of personal and health data;
- Assess whether you are managing them with the level of rigour appropriate to your real challenges;
- Measure any gaps in relation to what should be done;
- And, finally, identify the actions you need to take to manage your compliance appropriately.
Usefulness :
- Focus your compliance management efforts where they are most needed.
- Plan your remediation actions realistically, taking into account your organisation’s initial level of maturity and the appropriate level to be reached.
Implementation of appropriate measures
Objectives : after helping you assess your personal and health data risks and compliance, which are:
- loss of confidentiality or integrity ,
- loss or unavailability ,
- breach of your legal or contractual obligations ,
- regulatory non-compliance ,
we help you to determine whether the organisational, human, physical and technological measures you have in place are appropriate to the risks, and to adapt or supplement them where necessary. We can advise you on the ‘soft’ legal framework to use (the ISO 27702 standard is one example, but other frameworks adapted to your field can also be selected: for example, those of the CNIL in France, the UK Cyber Essentials, etc.).
Usefulness :
- Understand your organisation’s risks in a methodical way.
- Minimise their potential impact on your organisation and its stakeholders.
Implementation of a remedial action plan
Objectives : provide your organisation with the capabilities needed to execute a compliance remediation action plan, by providing you with the tools, methods, knowledge bases, libraries of model contractual clauses and procedures, training materials and expert support of our data protection officers.
Usefulness :
- Save time by benefiting from our experience.
- Enable your teams to acquire the necessary know-how gradually and in line with their own priorities.
- Effectively prepare for any inspection or any request from the competent authorities.
Expert service on demand
Objectives : advise you or intervene to meet a specific need: analyzing a collaboration involving complex roles and responsibilities in terms of data processing, support in responding to requests from a supervisory authority , assessment of a data protection impact analysis (DPIA), support in drafting an information notice for individuals, etc.
Usefulness :
- Solve a complex case.
- Have your approach, response or assessment validated by an independent expert.
Our other services for the protection of health data
You can put your trust in us to meet your need for compliance in personal data protection and privacy in the health area:
Do you have a specific question related to data protection in the heath area? Ask us your question, and we will be happy to answer it at no cost to you.
Would you like to be put in touch with a member of our customer or partner network, to receive confidential feedback on our services?
Would you like to know more about our company: our working methods, tools and knowledge base, our ability to meet your needs and projects?
All the terms of our discussions are regulated by our personal data protection and privacy policy.
