Cybersecurity & Data Protection
GDPR compliance that works in practice.
GDPR and data protection compliance means handling personal data lawfully, securely and transparently. Brenvard helps startups and smaller businesses map their data, put the required documentation in place and build routines that keep compliance working day to day.
In short
What does GDPR compliance require?
The General Data Protection Regulation (GDPR) applies to any business that processes personal data of people in the EU. It requires a legal basis for processing, transparency towards the people concerned, appropriate security and documentation such as records of processing activities.
For small businesses, the practical core is knowing what data you hold and why, informing people clearly, securing the data, having agreements with suppliers and knowing what to do if something goes wrong.
For official guidance, see the full text of the GDPR on EUR-Lex. At Brenvard, GDPR & data protection is part of our wider Cybersecurity & Data Protection services.
A clear map of the personal data you process.
Documentation: records, policies and agreements.
Routines for requests, breaches and new suppliers.
What is included
Data protection, in place.
Data mapping
We map what personal data you process, why, where it is stored and who has access.
Documentation
We help prepare records of processing, privacy policy and internal policies.
Supplier agreements
We review and put data processing agreements in place with suppliers.
Routines and training
We set up routines for data subject requests and breaches, and brief your team.
We focus on what matters most for your business and build documentation and routines that fit your size, rather than a heavy compliance programme nobody follows.
Map data and processing.
Identify gaps against GDPR.
Prepare documentation and agreements.
Set up routines and train the team.
Who it is for
Is GDPR & data protection right for you?
GDPR support suits any business handling customer, employee or user data, especially those in healthcare, financial services and digital products.
Startups building products that handle personal data.
Businesses unsure whether they meet GDPR.
Companies asked by customers for data protection documentation.
Frequently asked questions
Questions we often get.
Does GDPR apply to small businesses?
Yes. GDPR applies to businesses of all sizes that process personal data of people in the EU, although some documentation requirements are lighter for very small organisations.
Do we need a Data Protection Officer?
Only in certain cases, for example large-scale processing of sensitive data. We help you assess whether the requirement applies to you.
What is a data processing agreement?
It is a contract with a supplier that processes personal data on your behalf, setting out how the data must be handled and protected.
What should we do if we have a data breach?
Contain it, assess the risk, document it and, where required, notify the data protection authority within 72 hours. Our incident response service helps you prepare for this.
Connected services
Part of one connected team.
What’s next
for your business?
Tell us what you are working towards. We will help you find a practical place to start.
