Processing of personal data according to the 2018 changes of the EU legislation.
The General Data Protection Regulation (GDPR) is binding and applicable directly to all entities processing personal data. Therefore, new rules has to be adopted by all businesses processing personal data in the European Union.
Companies had time to implement the requirements imposed by the regulation until May 25th 2018. Right now, entrepreneurs must care for the ongoing compliance with the regulation since it is a continuous process, not a one-off activity.
The breach of the regulation can result in financial penalties up to 20 million EUR or 4% of the global turnover
Implementation of the GDPR requirements has reshaped the approach to personal data protection in organizations. New requirements include the necessity for performing risk assessment in relation to personal data processing, adjustment of documentation and procedures to new regulation and accounting for wide spectrum of data subjects’ rights (people to whom the processed data apply).
Data controllers must be prepared to apply new or extended requirements, such as:
Pro-active incident management
Analysis of vulnerability to incidents and examining the effectiveness of security (STRIKE)
PwC as Managed Security Service Provider (MSSP) Security Operations Center
Legal and information security support, investigation services in breach response
Support in communication with the Supervisory Authority and data subjects
Comprehensive online GDPR and data security training for your Company in order to build and increase the awareness about the regulation requirements. Our e-learning will give your employees not only theoretical legal knowledge, but also practical skills necessary for work and secure personal data handling.
...based on gamification and micro-tests, covers the following areas:
The training is available in Bulgarian or English. Depending on individual preferences and learning process, concluding the training and taking the test will take 1-2 hours. Each employee in your company who handles personal data on a daily basis, should take the training at least once.
The training is accessible from an Internet browser with the use of e-learning platform, either provided by PwC or already used by the client, depending on the selected variant. Number of access to the training is individually determined by each client. Final costs of the training therefore depends on the number of purchased accesses.
all entrepreneurs who process personal data in the European Union.
continuously care for maintaining compliance with the regulations on data protection
up to 20 million EUR or 4% of the company's global turnover
Country Managing Partner, Assurance Leader, PwC Bulgaria
Director, Risk Assurance, PwC Bulgaria
Tel: +359 895 558 319