EXPERTISE

Compliance and Data Protection

from burden to edge

The Italian legal system has multiple regulations that require companies to make considerable efforts to comply with legislative and regulatory measures. Adapting to this multitude of requirements and obligations is not an easy task, especially considering the continuous and frequent changes that make it even more difficult.

In the face of this need, building an adequate structure both with regard to safety at work according to D.Lgs. no. 231/2001 and a system that is perfectly respectful of the dictates of the G.D.P.R., to most companies may seem a loss of resources, both in economic and time terms. But as our clients have had the opportunity to verify, when something happens, such structures can make a material difference on the companies’ balance sheet. This is true especially with reference to the D.Lgs. n. 231/2001 that, if well implemented, can avoid to the company to be held responsible and, consequently, be obliged to pay huge fines. Moreover, complying to such measures, strongly diminishes company’s risk of loss of reputation which can result from the non-compliance to the rules that people consider a general value to be protected.

Why rely on us?

Aware of all of the above, we build a compliance structure so as to take advantage of all the benefits that the law grants and at the same time limit and constrain your business as little as possible. You will not feel constrained by additional not wanted rules but protected by a structure built specifically for and around your business.

In particular, with reference to the D.Lgs. no 231/2001, we aid you in the preparation and implementation of the so-called Organization, Management and Control Models (“MOG”) based on the requirements of the regulations and the guidelines of the major entities in the sector. Once the MOG has been implemented, we also support your company in the subsequent steps, both from a legal point of view and in relation to internal company processes. In addition, in agreement with your company, we update the MOG whenever required by the regulations, as well as provide support to the Supervisory Bodies of your company.

With regard to the Data Protection regulations, on the other hand, we offer you ongoing assistance in the management of privacy issues. With reference to the European Regulation no. 2016/679 (“GDPR”) we prepare and implement the necessary documentations, also advising on the structures to be adopted in order to comply with such regulations.

Why do our clients choose us?

  • We turn a legislative obligation into a benefit for our clients;

  • We limit our clients’ businesses as little as possible, building an ad-hoc structure without resorting to pre-printing;

  • We assist our clients in all phases, making the necessary changes following the new regulatory interventions;

  • We answer and solve our clients’ problems quickly, without unnecessary complications.

Some of the services we offer to our clients

  • Structuring and drafting of all of the documentation necessary for corporate compliance;
  • Drafting, integration and revision of 231 Models;
  • Elaboration and implementation of all the necessary documentation in the field of G.D.P.R.
  • Assisting in the development of an internal privacy chart with or without Data Protection Officer (DPO);
  • Privacy Impact Assessments and transfer of personal data outside the European Union;
  • Consulting in the due diligence phase and advice on the necessary interventions;
  • Advice relating to inspections and investigations by supervisory authorities;
  • Consultancy and support in case of investigations related to the Legislative Decree no. 231/2001;
  • Evaluation of the lawfulness of personal data processing;