Employee data protection
Managing employee data is a great risk issue for businesses, as regulators and individuals become increasingly vigilant about how that data is processed and hefty fines are imposed for breaches.
Besides legal compliance with a raft of constantly changing local laws, businesses need to make sure they have efficient cyber-security systems in place, as headlines about major data thefts directly impact reputations and brands.
Advising on many highly complex data privacy projects has given us the know-how, best practice approaches and management skills to help you efficiently navigate the global data protection landscape.
Our data protection experience includes, in particular:
- supporting or leading EU general data protection regulation gap analyses and implementation projects;
- privacy-by-design implementations and privacy-impact assessments;
- data protection issues related to websites, e-commerce and apps/mobile solutions;
- transfer of personal data to non-EEA countries, including risk management and implementation of workable solutions;
- employee data protection (including dealing with works council information and co-determination requirements, collective agreements on HR data processing, data protection and data security policies and trainings, data privacy consent of employees, cyber security issues, global HR data bases, etc);
- data loss and data breach, including obligations to provide information to national data protection authorities;
- privacy issues in M&A transactions as well as multijurisdictional outsourcing projects and commissioned data processing;
- dealing with privacy regulators; and
- access to personal data (in particular email accounts) in the context of internal investigations, including telecommunication secrecy issues.
