Data protection and compliance
Documentation is not enough where the operating process differs. This collection focuses on where data goes, who decides, how long it is retained and what happens if an incident occurs.
Practical questions
A legitimate business concern is not enough. Monitoring must be necessary, proportionate, documented in workplace rules and communicated to employees before it starts.
Read the guide ↗A business should not wait for a final forensic report before acting. Containment, evidence preservation, role allocation, risk assessment and the notification decision need to proceed in parallel.
Read the article ↗A data processing agreement is required where a supplier processes personal data on a controller’s behalf. A standard DPA is not enough: the parties must first identify their real roles and then document the service, security, sub-processors and exit arrangements.
Read the article ↗Filing an application for a Polish e-Delivery address is not the end of the implementation. The mailbox must be activated, access must be allocated and incoming official correspondence must be monitored.
Read the article ↗CRA reporting already applies. Manufacturers need a working classification process, access to ENISA's reporting platform and contracts enabling timely escalation.
Read the article ↗KSC registration is one stage of implementation. Review your company’s classification, filing details and remaining duties, including IT supplier arrangements.
Read the article ↗How to allocate controller and processor roles, verify the source and permitted use of databases, manage suppliers, objections and campaign evidence.
Read the article ↗Building a small SaaS? Learn what to address before your first paid subscription: terms, recurring payments, code ownership, GDPR and customer exit.
Read the article ↗A practical audit of processing activities, legal bases, suppliers, security, retention, incidents and data-subject rights.
Read the article ↗Seller information, checkout, terms, pricing, withdrawal, complaints, GDPR, reviews and product-safety issues for Polish e-commerce.
Read the article ↗Need advice?
Describe your goal and deadline. I will suggest the next step and we will agree the scope and fee before work begins.