GDPR COMPLIANCE
GDPR in your firm: evidence, not intentions.
Lawyers, chartered accountants and notaries handle sensitive data every day: client files, identity documents, tax data, family situations. The GDPR requires you to document this processing and to be able to prove it. We put in place the record, the privacy notices and the procedures, tailored to your profession.
WHAT THE GDPR REQUIRES
What you must be able to show.
The accountability principle (Article 5(2) GDPR) requires the firm to prove its compliance. In practice, this comes down to a few documents kept up to date.
—
The record of processing
Mandatory under Article 30: purposes, categories of data, recipients, retention periods and security measures.
—
Informing individuals
Clients, staff, candidates, website visitors: everyone must know what you do with their data (Articles 13 and 14).
—
Processors and AI
Practice software, cloud, AI tools: each provider processes data on your behalf and must be bound by contract (Article 28).
WHAT WE PUT IN PLACE
Complete documentation, in your name.
DOCUMENTATION
The documents
— Record of processing activities
— Privacy notices for clients, staff and the website
— Retention and archiving policy
— Processor clauses and contracts: software, cloud, AI
— Impact assessment where required (Article 35)
THREE WAYS TO WORK
At your own pace, or with us.
THE STARTING POINT
The assessment
45 minutes to review your documents, measure the gaps and set priorities.
Free, with no commitment
WITH OUR SUPPORT
Implementation
We adapt the documents to your firm, complete them with you and train your teams.
Fixed fee on quotation
Tao Sense provides tools, templates and an organisational method. Legal choices specific to your firm remain your responsibility, or that of your adviser.