Compliance Service Offering for Law 25

To support our clients who need to adjust their strategic and operational approaches and to meet the requirements of Law 25, we offer a compliance service.

The six main components of our personal information governance service offering to comply with Law 25 are:

1. Personal Information Governance

  • Establishment of a governance framework
  • Determination of governance rules
  • Development of governance policy
  • Development of privacy policy
  • Accountability

2. Personal Information Management

  • Inventory
  • Their processing throughout their lifecycle
  • Their protection/security

3. Management of Data Subject Rights

  • Handling requests
  • Handling complaints

4. Management of Privacy Incidents

5. Management of Projects Involving Personal Information

  • Conducting Privacy Impact Assessments (PIAs)

6. Training and Awareness Program on Personal Information Protection