CONTACT
DPOffice, short for Data Protection Office, assists companies and organisations with the implementation of the General Data Protection Regulation (GDPR) of the EU. We provide both legal ánd operational consultancy in making your business complaint with the GDPR.
GDPR is a challenge for every organisation big or small and requires as well knowledge of legal content and regulations as technical competences in order to be implemented. As it will for the main part be an ICT implementation operational skills will also be in order. It is clear that a GDPR implementation will be an extremely complex project.
In the first place we work together with our clients. It is essential that clients are aware of the obligations the regulation prescribes. We deliver you a tool to help make your business complaint, instead of just providing a bundle of paper that is not looked at again.
For the purpose of serving our clients in a pragmatic manner, we developed an implementation model. This generic framework is a flexible model that can be adapted to every specific need or obligations of your organisation.
Although both partners have the qualifications for the function of DPO, our first aim is to exchange knowledge. Only on specific request of the client, DPOffice will engage the position of DPO.
Our focus lies upon assistance of legal and operational GDPR implementation with the goal of being compliant on the 25th of May 2018, when the regulation enters into force.
DPoffice believes that every business has its own needs : the competences and capacities to follow the road to compliancy will be different for every organisation. Hence DPoffice will take into account the wishes of the clients.
Every combination of the above is possible.
Kristel Discart. Master of Law KUL since 1989. Kristel is specialized in social and labor law and the last 1.5 years the main focus is on GDPR. Kristel worked as a lawyer for more than 20 years in different business organizations and has developed a flexible and pragmatic way of working.
Jean-Pierre Bernaerts has over 30 years of experience in ICT. More than 20 as a CIO or IT director in different business sectors. His broad experience in this field is the perfect base for guidance in the (ICT) implementation of GDPR.
DPO, Data Protection Officer, a role DPOffice can take on) will be a person in the company responsible for overlooking all data processes and making sure compliance with the GDPR is guaranteed.
It is strongly advised –and in some cases even it is legally required - to hire a DPO to perform the following tasks :
Data Protection
To inform and advise the controller or the processor and the employees who carry out processing of their obligations pursuant to this Regulation and to other Union or Member State data protection provisions.
To monitor compliance
To monitor complaince with this Regulation, with other Union or Member State data protection provisions and with the policies of the controller or processor in relation to the protection of personal data, including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits.
To advice
To provide advice where requested as regards the data protection impact assessment and monitor its performance pursuant to article 35.
To cooperate
To cooperate with the supervisory authority.
Contact point
To act as the contact point for the supervisory authority on issues relating to processing, including the prior consultation referred to in article 36, and to consult, where appropriate, with the regard to any other matter.
Data protection
To monitor compliance
To advice
To cooperate
Contact point
The Data Protection Officers (DPO) has in the performance of his task due regard to the risk associated with processing operations, taken into account the nature, scope, context and purposes of processing.
On the client request DPOffice can take on the role of DPO. The functionality and availability will depend on the requirements of the client, the complexity of the implementation, the industry, etc ...
In April 2016 the European Commission approved the General Data Protection Regulation (GDPR). The GDPR will enter into force on May 25 th 2018. Companies have less than two years to be complaint.
'Data protection regulation' & 'GDPR'
https://www.privacycommission.be/sites/privacycommission/files/documents/GDPR NL.pdf
'Data protection officer' & 'DPO'
'Kristel Discart' & 'Jean-Pierre Bernaerts'
GOVERNANCE
DPoffice provides a formal GDPR Governance- definition and setup. This is applicable for one company, a group of companies or a division/an association of organisations. The result is a framework - digital or on paper - to meet the requirements of the local DPA in case of an audit or control visit.
GUIDANCE
DPOffice guides the internal wok group with the project of the implementation and provides answers where necessary.
NEGOTIATING
DPoffice negotiates with your contractors or partners to make sure that existing contracts are made GDPR complaint and responsibilities lie with the proper party.
DPO
DPOffice takes on the function of DPO before, during and after the implemention as ordered in article 37 till 39 of the resolution. This option will only be accepted when the DPO reports to the CEO.
SPARRING
PARTNER
This assignment will only lead to e.a. one appointment a week where DPOffice takes on the role of sparring partner.
STAKE
HOLDERS
DPOffice provides services to yours clients, suppliers and other stakeholders in case you wish to deliver this service.
PERSON
RESPONSIBLE
FOR THE
IMPLEMENTATION
DPOffice leads the implementations project. This assignment will only be accepted if the consultant of DPOffice rapports to one of the members of the board of directors, preferable the CEO.
DPoffice provides a formal GDPR Governance- definition and setup. This is applicable for one company, a group of companies or a division/an association of organisations. The result is a framework - digital or on paper - to meet the requirements of the local DPA in case of an audit or control visit.
DPOffice guides the internal wok group with the project of the implementation and provides answers where necessary..
DPoffice negotiates with your contractors or partners to make sure that existing contracts are made GDPR complaint and responsibilities lie with the proper party.
DPOffice takes on the function of DPO before, during and after the implemention as ordered in article 37 till 39 of the resolution. This option will only be accepted when the DPO reports to the CEO.
GOVERNANCE
SPARRING
PARTNER
GUIDANCE
STAKE
HOLDERS
NEGOTIATION
PERSON
RESPONSIBLE
FOR THE
IMPLE
MENTATION
DPO
this assignment will only lead to e.a. one appointment a week where DPOffice takes on the role of sparring partner.
DPOffice provides services to yours clients, suppliers and other stakeholders in case you wish to deliver this service.
DPOffice leads the implementations project. This assignment will only be accepted if the consultant of DPOffice rapports to one of the members of the board of directors, preferable the CEO.
Data protection: to inform and advise the controller or the processor and the employees who carry out processing of their obligations pursuant to this Regulation and to other Union or Member State data protection provisions.
To monitor compliance: to monitor complaince with this Regulation, with other Union or Member State data protection provisions and with the policies of the controller or processor in relation to the protection of personal data, including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits.
To advice: to provide advice where requested as regards the data protection impact assessment and monitor its performance pursuant to article 35.
To cooperate: to cooperate with the supervisory authority.
Contact point: to act as the contact point for the supervisory authority on issues relating to processing, including the prior consultation referred to in article 36, and to consult, where appropriate, with the regard to any other matter.
Jean-Pierre Bernaerts has over 30 years of experience in ICT. More than 20 as a CIO or IT director in different business sectors. His broad experience in this field is the perfect base for guidance in the (ICT) implementation of GDPR.
| DPOffice