Mikinski & Partners Law Office has an extensive expertise in the field of personal data. Over the years, our firm has assisted many businesses in setting up all necessary processes on personal data protection. Our services in this area include:
- Making your business GDPR and PDPA (Personal Data Protection Act)-compliant, which service goes through an in-depth review and analysis of the processes related to the personal data processing, as well as an assessment of the impact of possible data breaches in relation to the risks of breaches of rights and freedoms of natural persons, as well as through the preparation of a package of documents to make the processes of personal data compliant with the provisions of Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act, incl. policies, procedures and documents to be applied and submitted to supervisory authorities.
- Conducting an audit for compliance with the GDPR and PDPA, which audit aims to examine the legality and effectiveness of the applicable documents and processes for processing and protecting personal data at the controller, their compliance with Regulation (EU) 2016/679 (GDPR ) and PDPA, as a result of which the necessary changes will be made in the internal rules, policies and procedures in view of the results of the audit. After agreement with the client, one-time training may be conducted for employees of the personal data administrator involved in personal data processing operations.
- Filling the role of a Data Protection Officer (DPO): this service starts with an analysis of the need for such a role for your business. Provided that there is a real need to select an officer, our firm may offer its qualified expert as a Data Protection Officer to represent you to the Commission for Personal Data Protection (CPDP) and before data subjects, as well as to provide the necessary assistance through oral and written advice on personal data processing and protection issues and with periodic audit of the existing relevant rules and procedures in your business.
- Training on GDPR and PDPA application, including training of the management of your business on issues related to the general application of the two regulations and/or training of your operational staff on the practical application of your personal data processing processes.
- Representation to Commission for Personal Data Protection (CPDP) and courtroom litigation.