GDPR Compliance Law
Full service data protection and GDPR compliance for organisations operating across borders.
Ricky Chopra International Counsels is a full-service international law firm offering a wide range of legal support. We believe in assisting our clients in the most responsive and cost-effective manner. Mr. Ricky Chopra, Chairman and Chief Counsel of the firm, possesses vast experience in the Data Protection, Privacy and Cyber Security sector.
Our GDPR practice extends from analysing, assessing, designing and implementing to monitoring any new data-protection process you need in order to comply with the GDPR.
About the GDPR
The General Data Protection Regulation is the European Union's data-protection law. Applied across the EU, it governs all businesses operating within the union and implements a more consistent approach to data protection. All organisations transacting with EU-based businesses are also affected and must comply.
The regulation introduces an enormous array of changes. Its main aim is to safeguard citizens' private and confidential information. It strengthens the right to privacy of individuals and imposes enhanced data protection through stringent rules for businesses that deal with data.
Applicability & compensation
The GDPR applies to companies processing personal data in the context of an EU establishment, companies offering goods or services to EU residents, and companies that monitor the behaviour of EU residents. If your organisation controls and processes data on people living in the European Union, it applies, even if your organisation is not located in the EU.
Complying is not optional. The Data Protection Commissioner may impose fines in the event of a data breach of up to €20 million or 4% of annual turnover, whichever is greater, calculated at a group level rather than by subsidiary.
How RCIC helps you comply
With the RCIC team you will receive consistent advice, tailored to you throughout your GDPR journey, ranging from data-protection frameworks, policies and procedures, data-processor management and information security to international data transfers and compliance documentation.
- GDPR gap analysis, bridging current data-privacy compliance and the GDPR
- Auditing the data lifecycle against a GDPR compliance checklist
- Reviewing consent, notices and grounds for lawful processing
- Ensuring data transparency and updating employee notices
- Maintaining detailed records of processing activities and data-flow maps
- Reviewing cross-border data exports and transfer mechanisms
- Data-protection impact assessments and privacy by design
- Advising on the appointment of a Data Protection Officer
- Our virtual DPO and legal-software solution to track compliance and manage data breaches
- Training for Data Protection Officers and for staff handling private data