Our
experience

Veryfication and updating of all regulations on personal data processing

For one of our clients – Creditstar Polska, a leading lending institution we carried out a project involving the veryfication and updating of all regulations on personal data processing. 

For one of our clients – a leading lending institution, we carried out a project involving the verification and updating of all regulations concerning the processing of personal data.

The adoption of documentation related to the proper implementation of the obligations established by the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) is just the beginning!

Updating your documentation and processes for processing personal data, especially when introducing new services or starting new business projects, is a must and should be done on a regular basis.

We have recently had the opportunity to update our procedures and adapt them to the growing business of one of the market’s leading lending institutions.

The update itself was preceded by an audit and a thorough familiarisation with the new data processing processes for the planned projects and the customer’s needs. Despite, in principle, correctly adopted data protection procedures and policies, we were able to additionally:

• streamline and tighten data processing processes;
• complete and adjust documentation to current standards and practices developed on the basis of current guidelines of the European Data Protection Board (EROD) and the Office for Personal Data Protection (UODO);
• develop and implement practical procedures for managing requests from data subjects.

An additional aspect of this update was the need to plan and implement a process of data co-administration within a group of companies based in different European Union countries. At the same time, a priority for the client was the simplicity of this solution in order to complicate, and therefore slow down, business processes as little as possible.