Technological Compliance

Every organization must perform an analysis of the risk to safeguard the rights and freedoms of data subjects, minimizing the likelihood and impact of personal data breaches. To this end we adopt the ENISA methodology for risk assessment, ensuring a structured approach aligned with European standards.

Article 32 of the GDPR requires the adoption of appropriate security measures, which must also be documented in the relevant section of the Record of Processing Activities. In addition to supporting your risk analysis, we help identify suitable security measures and ensure they are properly documented in your processing records.

The Italian Data Protection Authority’s provision of November 27, 2008, requires organizations to formally appoint their system administrators, periodically evaluate their activities, and retain “access logs” for a minimum period of six months.

When a processing activity is likely to pose a high risk to the rights and freedoms of individuals – or in other cases identified by the law – a DPIA must be carried out.

Out team will review your organization’s website, draft or update privacy policies in the appropriate languages, and recommend suitable measures to ensure compliance with current data protection regulations.

We can support your organization with the following services:

• Drafting Business Continuity Plans
• Drafting Disaster Recovery Plans
• Conducting Cybersecurity Assessments