Throughout the world data protection is the biggest issue because of personal data legislations.

GDPR, for its acronym in English (General Data Protection Regulation), is the regulation that regulates the protection of the data of citizens living in the European Union.

This regulation determines that all companies, regardless of their country of origin or activity, must comply with it if they collect, store, process, use or manage any type of data from citizens of the European Union. And it affects all of the people who live in the European Union. GDPR offer new tools so that users know what data company records or transfer and reason for these.

Companies are responsible for taking the necessary technical and administrative measures to ensure the appropriate and sufficient level of security in order to prevent the unlawful processing of personal data they have processed or to be processed, to prevent unlawful access to the data and to ensure the protection of the relevant personal data. Companies are also responsible for making necessary inspections regarding the measures in terms of technical and administrative measures to be prepared within this scope and establishing systems.

The seizure of digital environments containing personal data and the prevention of their use for illegal purposes are among the most important measures to be taken by the company. Although it is not possible to list the measures to be taken in this context, raising the awareness of the employees makes a significant contribution to the company’s fulfillment of this obligation.

We provide consultancy about rules and regulations which corporations must obey. In this context corporations must create its own policies and procedures. These policy and procedures expose company which personal or sensitive data are collected and used. Company must design which data collected by physically or by electronic ways. How data used is another substantial matter for corporations. Purpose of personal data for processing and lawful basis of processing is critical for complying to GDPR.

Finahukuk provides compliance consultancy about data protection legislations in European Union and worldwide.