Every organisation, whether a foundation, association, sole trader or public body, must comply with the GDPR (General Data Protection Regulation). This strict European privacy law requires appropriate technical and organisational measures and structural attention to information security and the privacy of your employees, customers, suppliers or patients.
The baseline assessment
A baseline assessment by Privacy Direct shows you how well your organisation has implemented the privacy rules. You will also immediately know which areas need attention. You can use the outcome to set your privacy ambitions as well. In addition, the baseline assessment shows how mature your organisation is in terms of privacy.
Why it matters
Well thought out privacy management provides a sound basis for preventing data breaches and safeguarding the rights of data subjects. It is vital that your organisation pays continuous attention to privacy, for example through a PDCA cycle (Plan, Do, Check, Act). The baseline assessment answers questions such as:
- Is it necessary or useful to appoint a Data Protection Officer?
- What personal data do I hold and which processing activities carry the highest risk?
- To what extent does my organisation comply with the privacy rules?
- Which additional privacy rules and standards are relevant to my organisation?
- Is it necessary to carry out a DPIA?
- Is my privacy policy in order, and if not, what do I need to do to comply in a practical and pragmatic way?
From baseline assessment to monitoring
With the results of the baseline assessment, we move on to the next step: monitoring. The baseline assessment provides a solid foundation for organising privacy systematically. With the Privacy Direct privacy handbook, you have a high quality document for complying with the privacy rules, including a plan of approach and a step by step plan. By continuously monitoring privacy risks, you gain the right tools to spot opportunities and risks in good time.