A robust privacy management is increasingly important. The development of modern technologies and globalisation has led to an increasing amount of regulation as the legislators and authorities respond to the changed circumstances. In addition, today the lawfulness of personal data processing is an integral part of business ethics, the growing importance of which has been a trend for a long time already. By investing in privacy management, an organisation can change the data protection regulation to a competitive advantage.
We offer comprehensive data protection and privacy services to your organisation. By approaching data protection and privacy from a business point of view, we strengthen your company’s brand and the trust of your customers as well as increase the value of your business. As our customer, you will be supported by our wide expertise, which covers legal services, risk management and cyber security – globally, when needed.
Our data protection and privacy services
Current state assessment and gap analyses
- Current state assessment of privacy management, recommendations and development proposals
- Planning the privacy management program based on results of the current state analysis
- Implementation of the privacy management program
Privacy governance model development
- Development and documentation of the privacy governance model
- Definition of the roles and responsibilities and planning of the key processes
- Definition of the monitoring and follow-up of the model
- Deployment of the governance model to your organisation
Risk assessments and impact analyses
- Identification and management of privacy risks
- Data protection impact assessments (DPIA) and their documentation
Identifying and mapping personal data processing
- Personal data inventory implementation
- Evaluating the appropriate basis for personal data processing
- Creating a record of processing activities
- Informing the data subjects about personal data processing
Preparing and commenting the privacy documentation
- Creating privacy documents and templates
- Reviewing existing documentation and proposing development actions
- Updating privacy documentation
Personal data transfers outside the European Economic Area
- Identifying international data transfers, transfer bases and required actions
- Transfer impact assessments (TIA)
Drafting and negotiating data processing agreements
- Drafting and commenting data protection appendices
- Identifying the need for data processing agreements, drafting and negotiating the terms
Awareness training to management and staff
- Organising training sessions to the management and different personnel groups
- Preparing theme specific training material
Communication and cooperation with the authorities
- Risk analyses related to personal data breaches and communication with the Office of the Data Protection Ombudsman
- Responding to data requests from authorities
Support services to Data Protection Officers
- Supporting your organisation’s Data Protection Officer in all operative tasks related to data protection regulation
Operative support and other consulting
- Legal and other advice on the implementation of general and industry specific data protection regulation
Privacy metrics development
- Identification, development and deployment of privacy metrics
- Preparing a Data Balance Sheet
Test the privacy level of your organisation
With this quick test you can easily get an overview of the basic elements of data protection and privacy and the possible gaps in your organisation.
See also
Contact us
Partner, Cybersecurity & Privacy Assurance Services, PwC Finland
Tel: +358 (0)20 787 7489
Stay connected
