PRACTICES

Leading firm in legal and technical advice on data protection and privacy.

ECIJA provides its services based on its knowledge of the different sectors of activity, both in the private sector and public entities, from a comprehensive experience of proximity, quality and attention to the needs of each of its clients, combining its knowledge of the law and business models and their implications from a technical and security perspective.

• Advice on how to adapt to data protection regulations, both national regulations and those applicable to the needs of the Client in the international sphere.
• Audits combining a legal, technical and organisational approach, in addition to preparing plans for further action.
• Advice on data protection matters in accordance with the applicable national and international regulations, and those specific to the client’s sector of activity, providing a 360º compliance system.
• Design of regulatory compliance strategies.
• Impact and risk assessments on the processing carried out or intended.
• Advice on the data lifecycle, from its collection and legitimisation, to its processing, use, reuse, anonymisation and securing, together with the interaction with data processors, co-controllers and assignors or assignees.
• Design and implementation of privacy processes by design and by default.
• Accompanying the internal DPO or outsourcing the job to ECIJA.
• Legal accompaniment in the management and notification of security breaches, before the control authorities or the data subjects themselves, with technical approaches, crisis management and communication.
• Advice on the processes of regularising international data transfers, preparing and implementing BCRs and the necessary procedures for their approval.
• Design and development of internal training programmes, preparation of simulations and Mystery Shopping within a proactive vision of compliance.
• Legal assistance in proceedings before oversight authorities in administrative proceedings, in addition to following up on them and subsequent appeals in judicial review courts.
• Accompaniment in the dialogue with the supervisory authorities in matters of data protection.
• Advice on Big Data and Data Science projects, and on solutions related to the use of AI.
• Advice in relation to e-commerce projects or internet platforms, facilitating full compliance with applicable regulations.