Who we are

In the era of Big Data and AI, all data flows faster… even the most sensitive.

The General Data Protection Regulation (GDPR) is a European regulatory text that came into force on the 25th May 2018.

It regulates the processing of data equally across the European Union.

The CNIL, Commission Nationale de l’Informatique et des Libertés, is the French supervisory authority in charge of ensuring compliance with and implementation of the GDPR.

It has monitoring and sanctioning powers of all kinds:

• Administrative fines
• Exclusion from public tenders
• Criminal penalties
• Damages
• HR and occupational risks
• Image deficit

1. Designate a data controller
2. Identify your processing operations
3. Prioritise the actions to be taken
4. Risk management
5. Organise internal processes
6. Documenting compliance

Data management through our solutions for GDPR compliance.

CONTEXT

The Loi informatique et libertés, the legislative framework regulating the use of personal data, has evolved until the 25th May 2018, when the GDPR was created. With the entry into force of the GDPR, public and private organisations must be able to demonstrate that concrete actions have been taken to ensure the application of this legislation internally. Actecil accompanies you in the actions to be taken:

• The treatment must be compliant and referenced in a register.
• Additional analyses may be necessary (PIA, risk analysis).
• New processes are mandatory (Privacy by Design, consents…).
• There must be a documentary basis (Accountability = Responsibility).
• The existence of a DPO (Data Protection Officer) is recommended (mandatory in some cases).

This is why we propose a 360º offer:

• Consultancy (GDPR audit, GDPR diagnosis,…)
• E-assistance
• External-mutualised DPO
• IT Security Audit
• GDPR software
• GDPR training

From the moment you collect, process and record personal data of an individual in paper and/or digital format, YOU ARE AFFECTED !

Concrete examples:

• I have employees, I am affected.
• I prospect for customers, I am affected.
• I have clients, I am affected.
• I am a subcontractor and I handle personal data of another company, I am affected.
• I generate leads, I am affected.
• I am a private or public organisation, I subcontract services, I am affected.
• I am a DPO or referent of a company, I handle compliance and maintenance, I am affected.