GDPR

In the Borderland between Technology and Law.

All companies, knowingly or not, treat a variety of personal data in their daily activities. Processing may include customer records, employment contracts, email correspondence and other contacts with people inside and outside the business. Gulliksson has extensive experience with all aspects of data protection issues and continues to assist clients in this field.

The Swedish Data Protection Authority must be notified of data breaches within 72 hours in certain cases. Hefty administrative fines will also be implemented. In the event that a company fails to comply with the new rules, administrative fines of up to EUR 20 million or 4 percent of annual sales may be imposed on the company. This would naturally result in badwill for the company as well.

Collecting, managing and storing personal data is subject to increasingly complex and global regulations. Our GDPR-team has an extensive national and international experience in this area. They are also used to dealing with issues relating to the borderland between technology and law.
Gulliksson can help you review and map out the extent of your personal data processing and data protection, implement any adjustments required for compliance with the new rules, and prepare procedures and compliance documents and also provide ongoing advice on data protection issues.

At Gulliksson, we assist clients mainly (but not exclusively) with the following services in the field of data protection:

• Review of personal data processing activities – “GAP and risk analysis”
• Compliance with GDPR principles, such as privacy by design and privacy by default
• Development of a register inventory, privacy and cookie policy
• Advice on cookies and web data
• Personal data breaches
• Data processing agreements and data sharing agreements
• Consent texts and related advice
• Impact assessments and balancing of interests
• Handling of patient data
• Camera surveillance
• GDPR compliance when implementing new technologies, including AI and automated decision-making