Data Protection and Cyber Security

The digital economy is data driven. Violations of the relevant regulations in the areas of cloud computing, Internet of Things (IoT), social media or big data analytics can lead to serious damage to your image and result in high fines. Rules-compliant data protection mechanisms are therefore an important aspect of corporate management and part of corporate responsibility. It is precisely the fear of negative publicity that drives many companies to implement appropriate data protection measures.

What EY Law can do for you

Our network of specialists for law and IT security covers more than 80 areas of responsibility. It deals with data protection and cybersecurity issues around the world, including:

  • Compliant big data projects
  • Compliance with the new EU General Data Protection Regulation (GDPR)
  • Effectiveness studies on data protection factors
  • Compliance with the rules for the use of social media
  • Cyber security breach management
  • Data protection rules and their implementation
  • Data protection as a core element of digital product developments
  • Regulatory compliance for cloud computing
  • Data protection in mobile apps
  • Set of rules for international data exchange

We support you in getting your company ready for all applicable legal requirements. Thanks to our close cooperation with IT experts, we are in particular able to take technical aspects into account across disciplines.

Our services in detail:

  • Support in establishing a legally compliant status in compliance with all relevant requirements of the General Data Protection Regulation as well as the Austrian Data Protection Act
  • Data protection compliance audits to determine the compliance status and develop suggestions for improvement
  • Training of data protection officers or employees of the legal or compliance department and the workforce
  • Support in the analysis and documentation of all data applications
  • Ensuring compliance with data security measures and their documentation
  • Development and updating of policies
  • Support with data protection impact assessments
  • Development of a data breach concept for emergencies
  • Definition of processes to safeguard the rights of data subjects (information, correction and deletion obligations)
  • Representation before authorities and courts
Scroll to Top