GDPR in practice: new compliance obligations for companies

Processing records, impact assessments and the appointment of data protection officers remain the areas with most non-compliance.

GDPR has been in force for several years, but supervisory authorities keep stepping up enforcement. Inspections focus above all on incomplete processing records and the lack of clear internal policies.

A good practice is to treat data protection as part of normal business operations: appoint responsible people, train teams and document decisions. Prevention always costs less than correction.

We support companies in building tailored compliance programmes, from initial audits to employee training.