Compliance · European Union and United Kingdom
GDPR and UK GDPR
The General Data Protection Regulation and its UK version are the privacy laws most other countries measure themselves against. Indian companies with European clients are often asked for GDPR evidence before the contract is signed. We help you put that evidence together and make the changes behind it.
Who it applies to
Is this law relevant to you?
Organisations established in the EU or UK, and organisations elsewhere that offer goods or services to, or monitor, people in the EU or UK.
Core obligations
What the law asks of you
A plain language summary. Your legal team should confirm how each point applies to your business.
- Lawful basis
- A written lawful basis for each purpose you process data for.
- Records of processing
- A current record of what data you process and why.
- Data subject rights
- Requests for access, erasure, portability and objection answered on time.
- Privacy by design
- Privacy built into systems, with private settings by default.
- International transfers
- Standard contractual clauses and transfer risk assessments for data leaving the EU or UK.
- DPIAs
- Data protection impact assessments for high risk processing.
How we help
From gap to evidence
- Gap assessment and records of processing
- Data processing agreements and transfer paperwork
- DPIA templates, and completed DPIAs
- A process for handling rights requests
- Product changes so privacy is the default
Do we need an EU representative?
Often yes, if you are based outside the EU and offer services to people there, and a UK representative too, for UK GDPR. We work through this with your legal advisors.
Request a GDPR and UK GDPR assessment
Regulations
Other laws we advise on
Start a conversation
Compliance that holds up in practice.
Start with a short assessment. We tell you which laws apply, what to fix first and what it will take.
A specialist replies within one working day. The first conversation is free.