GDPR contract and legal services

GDPR contract and legal services

Reviewing and updating data protection documentation and commercial agreements to align with the GDPR can be significant, time consuming and legally complex.

You will need to:

• Increase the amount of information you need to include in your privacy notices. The notices must also be clear, concise and intelligible;
• Review and update your privacy, data retention and information security policies. In some cases, you may need to create new policies;
• Update or include new data protection clauses in your contracts with suppliers, customers and employees; and
• Ensure where you transfer personal data outside the EEA, the appropriate legal provisions are in place, such as model contract clauses.