GDPR certification

More about GDPR certification

How to ensure GDPR compliance

Identify and document the data you hold

Conduct a thorough investigation into the data you store. Identify data that is personal or sensitive, how it’s processed and who has access to it.

Review current data governance practices

Evaluate your current data governance practices and policies, document the lawful basis for any processing, and identify any areas that require improvements.

Establish procedures for reporting breaches

Put processes in place for detecting, investigating, and reporting breaches and develop an internal plan for responses. Data breach testing can ensure your procedures are effective.

Develop a framework

Ensure your procedures are adequate for data subjects to exercise their extended rights under GDPR.

Raise awareness

GDPR requires privacy protection by design and by default. Best practices for information governance should be embedded throughout the organisation and at every stage of each business process.