GDPR – data protection
Legal support for controllers and processors – from audits and documentation, through contracts and data protection officer services, to data breaches and proceedings before the President of the Polish Personal Data Protection Office (UODO).
Legal basis: Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR); Polish Personal Data Protection Act of 10 May 2018.
Scope of services
GDPR audit
Compliance review and remediation plan
More
GDPR documentation
Records of processing, policies, privacy notices
More
Data Protection Officer
External DPO and support for in-house DPOs
More
Processing agreements and transfers
Art. 28 GDPR, joint controllers, third countries
More
Data breaches and UODO proceedings
72-hour notification, inspections, complaints
More
GDPR training
Management, HR, staff
MorePricing
- GDPR compliance auditfrom PLN 2,000
- GDPR documentationfrom PLN 1,000
- Data protection trainingfrom PLN 1,000
- Review of processor agreementsdepending on contract complexity
- Ongoing GDPR support / external DPOnegotiable
Prices are indicative. The final quote depends on the scope of the matter and is agreed after the first conversation. Ask for a quote →
Accountability
The GDPR requires the controller not only to comply with the data protection principles but also to be able to demonstrate compliance (Article 5(2) GDPR). In an inspection or complaint, documents count: the record of processing activities, risk analyses, processing agreements, authorisations and the breach register. Administrative fines imposed by the President of UODO may reach EUR 20 million or 4% of total worldwide annual turnover.