For companies of all sizes and in all industries, data protection is a sensitive issue. Expertise is essential to ensure compliance with regulatory requirements and to maintain standards that build trust with customers and business partners. In Germany, according to the EU General Data Protection Regulation (GDPR), every company with at least 20 employees who have access to personal data is obliged to appoint a data protection officer and to comply with the relevant regulations.
Excerpt from Instructo Consulting’s consulting services in the area of data protection in accordance with the requirements of the EU GDPR:
Under Article 37(1) of the GDPR, a company is required to appoint a data protection officer if its core activity consists of the carrying out of processing operations which, by virtue of their nature, their scope and/or their purposes, require extensive, regular and systematic monitoring of data subjects, and the core activity consists of the extensive processing of special categories of data in accordance with Article 9.
Companies are generally required to appoint a data protection officer if they have 20 or more employees who are involved in the automated processing of personal data, according to Section 38 BDSG. This includes all relevant categories of employees, such as full-time and part-time staff, IT staff, trainees, freelancers and temporary staff. Automated processing already includes the use of computers, mobile phones or tablets. However, a DPO is also required if personal data is used for business purposes (e.g. market and opinion research) or if a company’s core business involves extensive processing of certain categories of personal data.
Health data is not the only sensitive data that requires a DPO. Other data such as criminal history, religion, and sexual orientation are also considered sensitive.
Based on an initial consultation and analysis of your current situation, we will be happy to provide you with a customized offer tailored to your business.
Based on an initial consultation and analysis of your current situation, we will be happy to provide you with a customized offer.
Data protection training, education, instruction
Successful data protection requires the empowerment of employees and freelancers.
Click here to learn more about the Instructo Academy training program.