A respective Audit Report will be developed by which all the findings of compliance will be identified, as well as any compliance gaps and managerial action plans that will have to be in place.
In addition, at this stage all the Policies and Procedures, Guidelines for Privacy will be developed and delivered as well as determination of appropriate technical and organizational measures that will assure the security of information and safeguarding of the rights of the subjects.
Extra emphasis will be given in the below areas:
- Introduction of new technologies for data security
- Introduce new tools to substantiate consensus and respect the rights of subjects (right to transparency, portability, oblivion)
- Apply Best Practices and train staff to avoid breaches as a result of human error or malicious actions.
Deliverables:
- Compliance Audit Report
- New procedures and audit techniques in order to build the GDPR compliance framework.