Organizational Compliance

EU Regulation 2016/679 (“GDPR”) introduced the principle of accountability, which requires data controllers and processors to adopt proactive behaviors and demonstrate the effective implementation of measures aimed at ensuring compliance with the regulation. Essentially, it is not enough to merely comply with the provisions of the Regulation; specific and demonstrable activities must also be carried out.

Argo supports you in drafting the documentation required by the Regulation and in performing the activities that are required by the law.

Privacy notices for data subjects

Every organization is required to provide transparent information to data subjects whose personal data is processed. Data subjects may include, for example: clients, suppliers, employees, consultants, app and website users, and newsletter subscribers. Find out what information must be provided to data subjects.

Authorization of personnel processing personal data

Individuals who process data under the authority of a Data Controller or Data Processor must be formally authorized and instructed. We support you in drafting organizational charts, issuing authorizations, and training your organization’s personnel.

Appointments of Data Processors

All external parties that process personal data on behalf of the organization must be appointed as data processors or sign a specific Data Processing Agreement (DPA).

Record of Processing Activities

Records are documents that list all personal data processing activities carried out by the organization. According to the GDPR, the following records must be prepared:

  • Record of processing activities as controller (Art. 30(1))
  • Record of processing activities Record of categories of processing activities as processor (Art. 30(2)) (if the organization acts as a Processor)

Staff Training

In line with the GDPR requirements on instructing and training staff (Articles 29, 32(4) and 39), Argo delivers courses on privacy and personal data protection.