Menno Weij

Partner Tax & Legal, Tax

E menno.weij@bdo.nl

T +31 (0)30 633 62 94

Maurice Koetsier

Senior Manager IT Risk Assurance | BDO Digital

E maurice.koetsier@bdo.nl

T +31 (0)30 284 98 00

Managed Services & Breach Response

• DPO-as-a-Service: we can offer DPO services in which we act as the external Data Protection Officer and the main point of contact for the Dutch Data Protection Authority.

• Data Protection Managed Services (DPMS) offer right-sized solutions to address data protection compliance; we can handle all privacy operations and respond to any queries and issues from clients, employees, and other involved parties.

Implementation & Remediation

• At BDO TPL, we assist clients with implementing privacy frameworks and developing guidelines and procedures for implementation, as well as supporting clients in remediating identified issues.

• The above includes the development of records of processing, privacy notices, data protection policies and procedures, third-party processor remediation, and processes for data minimisation, retention, and erasure.

Audits and Risk Assessments

• We support clients to assess the current state of their privacy program and assist them in gathering and documenting core functions and information to comply with international, regional, and local legislation.

• We perform Data Protection Impact Assessments (DPIA) and Data Transfer Impact Assessments (DTIA), which are mandatory under certain circumstances.

Legal support

• We provides comprehensive advice on local- and cross-jurisdictional privacy matters, from ad hoc legal advice to continued legal presence through our DPMS services (see above).

Training and workshops

• We have a team of experienced professionals who can help you fulfill your obligations regarding employee training and continued education.

The services regarding privacy & data protection obligations are further described below:

While most organisations recognise the importance of data privacy compliance, they struggle with operationalising the privacy program to effectively address the challenges of seemingly contradicting laws and meet both their privacy obligations and their AML and other legal regulatory obligations. Compounded by the increase in security risk due to cyber-attacks and ransomware, it is more important than ever for organisations to enhance and maintain their data protection and privacy compliance programs.

BDO Tax & Legal supports clients with privacy and data protection compliance, as well as other regulatory technology obligations.

The GDPR has introduced obligations and requirements that sometimes conflict with other legislation within the financial sector. For example, anti-money laundering requirements and rules on the verification of identity. Furthermore, each potential change to current practices tends to cause a lot of debate.