Data Protection

We provide specialized legal advice on data protection and privacy, supporting companies and organizations in complying with the General Data Protection Regulation (GDPR), the Spanish Organic Law on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable regulations. Our advice focuses on both the adaptation and review of compliance systems and the ongoing legal management of issues arising from the processing of personal data, with a special emphasis on risk identification and prevention.

‍

Data protection compliance

We provide advice on the design, implementation, review, and updating of data protection compliance models, adapting them to the specific activity, structure, and risks of each organization. Among other services, we provide advice on identifying and analyzing personal data processing activities, determining their legal bases, drafting and reviewing records of processing activities, privacy notices and policies, analyzing relationships with data processors, and evaluating the legal and organizational measures necessary to ensure regulatory compliance.

We also provide advice on conducting risk assessments, data protection impact assessments, and evaluating new projects, products, services, or technologies from a privacy and data protection perspective.

‍

Data Protection Officer (DPO) and ongoing advisory services

We provide Data Protection Officer (DPO) services, both in cases where their appointment is mandatory and when the organization decides to voluntarily incorporate this role into its compliance structure. The service includes ongoing advice and supervision of data protection regulatory compliance, support for management bodies and the various areas of the organization, review of internal procedures, and handling inquiries related to personal data processing. We also act as a point of contact for data protection matters and provide assistance in dealings with the Spanish Data Protection Agency and other competent supervisory authorities.

‍

Security breaches and procedure management

We provide legal advice on managing security breaches that affect personal data, from their initial detection and analysis to assessing the risks to the rights and freedoms of the affected individuals.

We provide assistance in determining documentation and notification obligations to the supervisory authority and, where appropriate, communication to the data subjects, as well as in defining and reviewing internal incident response protocols. We also offer legal representation in proceedings before the Spanish Data Protection Agency and other competent authorities, including investigations, sanctioning proceedings, claims, and appeals, as well as in handling and resolving requests for the exercise of data protection rights. Our goal is to provide specialized, practical, and ongoing legal advice that allows for the integration of data protection into the organization's processes and to anticipate and properly manage the regulatory risks derived from personal data processing.

‍