Privacy and Information Security

Privacy is important and is becoming increasingly important due to the rapid technological developments and digitalisation of businesses and the public sector. With increasing digitalisation comes privacy-related challenges and changes to the threat and risk posture with increased risk of adverse events, as well as opportunities for efficiency, automation and value creation.

Our lawyers are highly conscious of the fact that processing of personal data and the implementation of new technology constitute a risk factor. Improper processing of personal data or insufficient information security may result in violation of regulatory requirements. There is also the commercial risk, as businesses could risk loss of reputation, credibility and turnover.

Personal data and new technology can be valuable assets for innovative businesses that are able to navigate the rules for information security and processing of personal data. Clear and concise advice from adept lawyers is a requisite for the realisation of these opportunities.

We assist with matters concerning:

• Cloud onboarding
• Compliance, investigations and risk management
• Crawling and scraping of personal data
• Cross-border transfer of personal data to third countries (BCR and EU Standard Contractual Clauses)
• Electronic marketing and cookies
• Data Protection Impact Assessments (DPIA)
• Dispute resolution and government relations (Data Protection Authority, Privacy Appeals Board and the ordinary courts)
• DPO-as-a-service
• Internal control, guidelines and routines for data subject requests (e.g. access, rectification and erasure)
• Personal Data Breaches
• Privacy in the workplace (e.g. e-mail access, use of camera surveillance or other control measures)
• Privacy policies and data processing agreements
• Regulatory requirements for information security
• Security testing (pen-testing)
• Transactions, due diligence and acquisitions