We develop and implement complete Data Protection Compliance Programs, working at all stages of this process — from the mapping of personal data processing cases, through the preparation of risk assessment and identification of compliance gaps, to the implementation of the program itself, with the creation of policies, terms, legal instruments in general, and advice on the formulation of texts on websites, social media, as well as guidance for appointing a DPO (Data Protection Officer), and all the needs that may arise from each activity of your business area.

We prepare a Mapping of Personal Data Processing Cases, which leads to the creation of ROPAs (Record of Processing Activities).

We carry out a risk assessment on privacy and personal data protection issues by classifying the identified risks according to the degree of impact and probability in accordance with the COSO (Committee of Sponsoring Organizations of the Treadway Commission) framework and developing action plans for monitoring and creating internal controls to mitigate the risks found.

We review and prepare contractual clauses, terms of commitment and/or consent, internal policies, and other legal and business instruments to ensure compliance with Personal Data Protection, in addition to the preparation of Data Protection Impact Assessment (DPIA).

We can play the role of DPO (Data Protection Officer) for your company, undertaking the roles established by law, as well as advising on the identification and appointment of an internal DPO, guiding their performance in any demand that may exist, and counseling on the creation of a Data Protection Committee.

We provide third-party due diligence advice to identify information security and data protection risks of your company’s suppliers, customers, and business partners.

We offer training to expand the Personal Data Protection culture to the DPO (Data Protection Officer) and to all company employees.

We assist in the achievement of certifications in Personal Data Protection, especially ISO 27001, 27002, and 27701.