GDPR
European Data Protection Requirements Are Strict
What’s It All About?
Data protection under the GDPR is demanding: while regulations are uniformly applied across the EU, implementation poses significant challenges for businesses. The expectations regarding transparency, documentation, and technical and organizational measures are high — and often complex in individual cases. This makes a solid understanding of the legal framework and tailored implementation within business processes all the more important.
Quick Links Services
What Do Companies Need to Do?
The GDPR covers a broad range of measures to protect personal data — including email or IP addresses, phone numbers, tax IDs, or social security numbers, as well as contact details of business partners such as suppliers. Key requirements include:
- Potential obligation to appoint a Data Protection Officer, depending on the company’s core activities and number of employees
- Obligation to maintain a record of processing activities
- Duty to inform data subjects about their rights (e.g. right of access or data portability)
Auskunft oder auf Datenübertragbarkeit - Obligation to report data breaches
- Requirement to train employees and provide appropriate resources and space if appointing an internal Data Protection Officer
How CORE Supports You:
CORE helps companies assess and, where necessary, adapt their (data protection) processes to ensure GDPR compliance. Our services include acting as your external Data Protection Officer, conducting privacy audits and staff training, as well as performing product and service analyses or audits.
We follow a cyclical approach aimed not only at short-term compliance, but at long-term enhancement of your data protection practices through regular review and continuous improvement of your privacy framework.
In addition, we offer rapid-response support for acute challenges such as handling data subject requests or inspections by supervisory authorities. To help quickly boost your GDPR compliance, we have developed a ready-to-use initial action plan.
Basis Measures
External Measures
- Legal compliance check for privacy policy and legal notice (imprint)
- Review and adaptation of social media and other online activities
- Official registration of the Data Protection Officer with supervisory authorities
Documentation
- Assistance in creating the record of processing activities
- Documentation of technical and organizational measures (TOMs)
- Review of data processing agreements with service providers
Additional Measures (examples):
- Data Protection
Impact Assessments (DPIAs) - Employee awareness and training
- Fulfillment of information obligations
- Handling of data subject requests
- …and more
Basic Compliance Package
