Senior Consultant
CurrentTudor Galoș Consulting is a Boutique Consulting Company, helping companies expand or develop new businesses or startups, pitch for RFPs or fundings and be fully compliant to GDPR.PERSONAL DATA PROTECTION (GDPR COMPLIANCE)Data Identification- working with all the key stakeholders to understand the data processing culture.- auditing entry points, exit points and storage locations for personal data.- mapping data islandsData Governance- mapping data flows- DPIAs for personal data processing activities with significant risks.- identify third partiesRisk Analysis and Mitigation- identify key risks from compliance perspective.- propose mitigation measures – technical and organizational – to address these risks.- use growth-hacking tactics to propose tests for these measures to see how they work in business environments before scaling-up to the whole organization Documentation- Record of Processing Activities (mandatory).- Data Protection Agreements - DPIA Register – a register with all the DPIAs, risks and mitigation measures.- Internal Privacy Policy.- Privacy Notices - IT Security Policies - Business Procedures for key departments - Security Incident Reporting – Internal Procedures.- Guideline for DPO Role.- Reporting.- Other documents, depending on each caseWe are also offering assistance in DPA negotiations with third parties, including vendors, partners and customers.We are also offering:- GDPR Gap Audit- Consulting on Privacy Compliance Issues- Data Inventory Management- Privacy Impact Assessment- Data Protection Policies & Procedures- Risk Management - Data Breach Management- Subject Access Request Management- Privacy Trainings- Privacy Notifications- Compliance Reports- Data Protection Officer Outsource- EU Representative Outsource