Compliance in relation to data production

Companies are increasingly focusing on data protection. Complying with the essential requirements of data protection is indispensable to companies. Which requirements do companies need to comply with in relation to their employees? What does the entrepreneur need to take into account in relation to customers and suppliers? What information is to be published on company homepages or in business e-mails?

In the light of the requirements of the EU's General Data Protection Regulation and the implications of the "Safe Harbour Ruling" of the European Court of Justice (ECJ) from October 2015, the pressure on companies to focus more on data protection as part of compliance management is increasing.

While the ECJ's "Safe Harbour Ruling" may already result in sanctions for companies in the form of, say, a fine of up to EUR 50,000 or a prohibition order in the event of unlawful data transmission, the EU's General Data Protection Regulation will oblige organizations and companies to assess the consequences of critical data processing from 2018 onwards.

We will be pleased to assist you in examining, assessing and providing your company's compliance in the area of data protection and to develop solutions with you in respect of the legally compliant handling of personal data.

Company data protection officers

Section 4f of the Bundesdatenschutzgesetz (German Federal Data Protection Act - BDSG) lays down the conditions under which a data protection officer must be appointed. This statutory obligation applies to many companies. Any breach of this requirement may result in various sanctions. Companies are, however, also at liberty to appoint an external data protection officer. As a rule, this will provide many benefits, as certain responsibilities that may result in disruptions of operations if employees of one's own company are appointed to perform the role are assigned to this external data protection official.

If your company appoints a data protection officer from BfU AG, it will obtain a qualified contact person who undergoes advanced training on a regular basis and provides you with individual support. We will be pleased to perform the following tasks, in particular:

• Preparing the data protection officer's annual report
• Carrying out internal data protection audits or assisting with external data protection audits
• Providing regular information on new developments in data protection legislation that are relevant to your company
• Providing training on data protection legislation issues to employees
• Monitoring the implementation of legal requirements and compliance with data protection legislation