GDPR
GDPR
GDPR requires organisations to introduce a risk-based approach that involves assessing the risks presented by data processing activities and responding appropriately.
TRMB will review all areas of risk relating to GDPR and provide solutions to any issues raised.
GDPR
We can perform full or partial reviews of data protection systems, including:
- Accountability and governance processes
- GDPR Policies and procedures
- Data Protection Officer appointment and guidance
- GDPR training programmes
- DPIAs and project management processes
- Data inventory/information asset registers.
- Privacy notices
- Data Protection policy compliance processes.
- Adequacy of consents used to determine legal data processing activity
- Data retention and archiving policies
- Adequacy of Register of data breaches and security incidents
- Adequacy of lawful basis for processing personal data
- Adequacy and completeness of processes for seeking, recording and managing consent
- Parental Consent processes
- Accuracy of personal data
- Storage and backing up of data and paper files
- Adequacy of processing data requests within required deadlines
