{"id":16827,"date":"2020-10-02T17:41:09","date_gmt":"2020-10-02T17:41:09","guid":{"rendered":"https:\/\/businessadapter.es\/annual-renewal-of-data-protection\/"},"modified":"2024-12-11T10:49:27","modified_gmt":"2024-12-11T10:49:27","slug":"annual-renewal-of-data-protection","status":"publish","type":"post","link":"https:\/\/businessadapter.es\/en\/annual-renewal-of-data-protection\/","title":{"rendered":"Annual renewal of data protection"},"content":{"rendered":"\n

Renew data protection every year<\/strong><\/h2>\n

What should I do after implementing the Data Protection Regulation?<\/p>\n

What are the benefits of having the services of a data protection consultant every year?\"\"<\/a> data protection consultancy? <\/p>\n

These are the questions that some businesses ask themselves every year when it comes to renewing the services of their data protection consultant and which we will answer below.<\/p>\n

Prior to this, it is necessary to detail the logical steps of an implementation<\/p>\n

How is the Data Protection Regulation implemented?<\/h3>\n

Any data protection consultant, will deliver \/ provide you with a series of documents that as a whole is called in various forms; Dossier, Manual or Data Protection System, even some nostalgic use the old name of Security Document, but all of them must include different documents that the RGPD<\/a> and the LOPD<\/a> requires you. For example: <\/p>\n

–Record<\/strong>of Treatment Activities<\/p>\n

-Impact Assessment<\/strong><\/p>\n

–Assessment of the<\/strong>need to designate a DPD\/DPO<\/p>\n

-Personnel and Assets Inventory<\/strong>with details of authorized accesses.<\/p>\n

-Security Policies<\/strong><\/p>\n

–Protocol<\/strong>for Security Breaches or Breaches<\/p>\n

–Clauses<\/strong>and Contracts to be signed by customers, employees, suppliers, etc.<\/p>\n

-Distinctive<\/strong><\/p>\n

-Legal texts<\/strong>for Websites<\/p>\n

-Etc.<\/strong><\/p>\n

But this delivery of documents will only imply a partial compliance with the Data Protection Regulation<\/a><\/span>, because there are things that no consultant can do for your company. For example: <\/p>\n

–Signing<\/strong>documents (contracts with suppliers, clauses with clients, confidentiality commitments and manuals with employees).<\/p>\n

-Include<\/strong>legal texts in quotations, email, web ….<\/p>\n

–Locate<\/strong>video surveillance or data protection signs in their facilities.<\/p>\n

–Apply<\/strong>security measures (backups, passwords, antivirus, etc.).<\/p>\n

-Training<\/strong>in these Standards<\/p>\n

–Among<\/strong>others.<\/p>\n

It is recommended to involve different components of your team (IT Dept., HR, Admin. etc.), to speed up the implementation. <\/p>\n

What you should demand from your data protection consultant is that he\/she provides you with an Implementation Guide<\/strong>, detailing each of the actions under his\/her responsibility and it will depend on the consultant’s expertise and experience that this Guide is concise, practical and operational, which will greatly facilitate your work and will provide you with the necessary peace of mind to know that everything is in order.<\/p>\n

What should I do after implementing data protection?<\/h3>\n

Not everything ends with the implementation, as there may be events that require different actions in terms of data protection. For example: <\/p>\n

-Regulatory changes<\/strong>, (last in December 2018 with new LOPD-GDD), which would imply making changes in your Data Protection Dossier or Manual.<\/p>\n

–New<\/strong>Instructions of the AEPD<\/a> (last in July 2020 on cookies<\/a>), in this case affects legal texts of your website and change the way to treat cookies in this.<\/p>\n

–If you<\/strong>hire the services of a new supplier (this involves drafting new processing manager contracts, updating the register of processing activities – RAT -, among others).<\/p>\n

–If you<\/strong>hire new employees (involves training them in data protection<\/a>, you must provide them with documents that affect them according to their position and update different documentation in their Data Protection Dossier or Manual).<\/p>\n

-If you<\/strong>activate a Web or App (it implies the elaboration of legal texts ….), as well as updating the RAT, etc.<\/p>\n

–If<\/strong>a new video surveillance system is installed (it implies the elaboration of badges, since Securitas’ are not enough, informative clauses for employees, etc.), as well as updating the RAT, etc.<\/p>\n

What are the benefits of having the services of a data protection consultant every year? <\/h3>\n

Obviously if you have a data protection consultant, all the above mentioned updating work will be done by them and most importantly, through their monitoring work, they will inform you of the deadlines to comply with changes in Regulations or Instructions and identify any of the above mentioned updating needs.<\/p>\n

In addition, we provide examples of the benefits of having a consultant in successive years after the implementation(ask for each of these services in the contract, as not all of them provide these services):<\/strong><\/p>\n

-Assistance<\/strong>before inspections of the AEPD<\/a>. <\/p>\n

-CPR insurance policy<\/strong>that covers penalties to clients derived from the work of your consultant. <\/p>\n

-Quality Seal<\/strong>for Websites \/ Online Stores (renewable annually). <\/p>\n

-Security Breach Assistance<\/strong>.<\/p>\n

-Periodic Monitoring<\/strong>: Review and update of your Data Protection Dossier.<\/p>\n

-Consulting Services<\/strong>: Advice on regulatory developments, development of procedures for action in the event of changes in your organization, doubts, customizations, etc.<\/p>\n

-Legal assistance<\/strong>(lawyers appointed on your behalf): Attention to requests, exercise of rights, issuance of reports, etc.<\/p>\n

–Annual<\/a> audits<\/strong>:<\/a> if an expert verifies that you are doing everything right and issues a report (demand it), this creates responsibility on the part of the person issuing it, which benefits you. In addition this report is requested by different entities (AAPP, Large companies) obligatorily to provide them with services. <\/p>\n

-Data protection training<\/a> for new employees joining your company.<\/p>\n

If your current consulting firm offers you all these services, the chances of complying with the RGPD + LOPD-GDD are very high and the chances of assuming a sanction very low. <\/p>\n

Don’t resign yourself and count on real experts <\/strong><\/h3>\n

If you want to count on experts of guarantees, (Data protection consultancy Valencia \/ LOPD Valencia<\/strong><\/a>) do not hesitate to contact us<\/p>\n

<\/p>\n

[su_button url=”https:\/\/businessadapter.es\/contacto” target=”blank” background=”#f6f903″ color=”#181818″ size=”7″ center=”yes” icon_color=”#000000″]WE HELP YOU[\/su_button]<\/span><\/p>\n

<\/p>\n

<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Renew data protection every year What should I do after implementing the Data Protection Regulation? What are the benefits of […]<\/p>\n","protected":false},"author":1373,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[75],"tags":[],"class_list":["post-16827","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/posts\/16827","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/users\/1373"}],"replies":[{"embeddable":true,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/comments?post=16827"}],"version-history":[{"count":1,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/posts\/16827\/revisions"}],"predecessor-version":[{"id":16830,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/posts\/16827\/revisions\/16830"}],"wp:attachment":[{"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/media?parent=16827"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/categories?post=16827"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/tags?post=16827"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}