Are You Ready? GDPR Goes into Effect May 25. Blank Rome Can Help.
On May 25, 2018 (less than two weeks away), the EU General Data Protection Regulation (“GDPR”) will go into full effect. Entities, regardless of location, that collect or store personal data about EU residents are required to comply with the regulation. Noncompliant organizations could face massive fines.
Blank Rome’s interdisciplinary team of data privacy lawyers can help. Our attorneys are prepared to help begin the process of putting a compliance plan in place and prioritize high risk areas. For example, we can help you to:
- Inventory the EU personal data that you process, and the purposes for which you process it
- Evaluate and document the lawful bases for processing the EU personal data that you collect
- Create the necessary policies and procedures to govern your processing of EU personal data and your response to requests from EU data subjects to exercise their individual rights
- Establish mechanism to transfer EU personal data to the U.S., including by certifying to the Privacy Shield
- Put in place agreements with your service providers to cover the processing of EU personal data
- Update your security incident response policy to address the requirements of GDPR
If you have not yet begun preparing for GDPR compliance or are uncertain that your company will successfully meet the May 25 deadline, please contact us.
For an immediate response on this issue, please contact Jennifer J. Daniels, Blank Rome’s Cybersecurity & Data Privacy Group Leader, at 212.885.5575 or daniels@blankrome.com.
© 2018 Blank Rome LLP. All rights reserved. Please contact Blank Rome for permission to reprint. Notice: The purpose of this update is to identify select developments that may be of interest to readers. The information contained herein is abridged and summarized from various sources, the accuracy and completeness of which cannot be assured. This update should not be construed as legal advice or opinion, and is not a substitute for the advice of counsel.