GDPR Consulting
Experience in HR systems in Europe since 2004.
We connect the requirements of the General Data Protection Regulation (GDPR) to the way personal data is actually processed, in HR projects and in other uses. We work with companies that want to address GDPR requirements in their own systems and projects, and with European and international software vendors offering services in Europe.
Functional and technical consulting
Our functional and technical expertise starts from your systems and services as they are actually used, translated into processing activities and data flows.
Analyse the data used, purposes, user journeys and application exchanges. Translate requirements into functional rules and technical decisions.
Define rights, retention periods and protection mechanisms. Connect those rules to storage, deletion and system recovery.
Connect services, processors and AI uses. Define boundaries, data transfers and operational responsibilities.
Engagement outcomes
The engagement results in a gap analysis, functional and technical recommendations and an implementation path. We prioritise actions and define the rules to build into user journeys, access controls and operations. Where the processing requires it, we contribute to the data protection impact assessment (DPIA).
Case study
The choices presented here are the ones we apply on our own platforms. The architecture connects European hosting and storage, AI services, backups and access control, through to consent expiry and effective data deletion. The RAG case study shows how identities are separated and CVs pseudonymised before the AI uses them.
Let’s discuss your project
Tell us about your systems or service and the processing you have questions about. Together we will define what needs to be reviewed.
