Data protection and privacy: regulatory compliance and defence before the AEPD
Proper management of personal data is now a key issue for any organisation. Companies, institutions, and professionals must ensure that personal data is processed in accordance with applicable regulations, minimising legal risks and strengthening the trust of users, clients, and employees.
Abril Abogados has extensive experience in the application of data protection and privacy regulations, providing specialised advice on compliance with the General Data Protection Regulation (GDPR), the Spanish Data Protection Act (LOPDGDD), and other regulations related to privacy and the processing of personal data.
We support companies, institutions, and professionals in implementing compliance measures, including the analysis of data processing activities, the preparation of documentation and internal policies, and the review of procedures involving the processing of personal information. Our objective is to help organisations integrate data protection into their processes and operations, ensuring responsible data management.
We also provide legal assistance to individuals and companies in proceedings before the Spanish Data Protection Authority (AEPD), including investigations, claims, and sanctioning procedures in the field of data protection.
This comprehensive approach enables our clients to prevent regulatory risks, strengthen legal certainty, and comply with legal obligations in matters of privacy and personal data protection.
GDPR compliance implementation
Ongoing advisory services and updates on regulatory developments. Adaptation of websites (layered information, privacy policy updates, legal texts). Preparation of the Record of Processing Activities. Drafting of legal clauses to comply with information obligations towards data subjects. Review of contracts with employees, clients, and suppliers involving the processing of personal data. Drafting of data processing agreements. Risk analysis and data protection impact assessments. Advice on international data transfers (Privacy Shield, Binding Corporate Rules). Video surveillance (informational clauses and signage). Design and implementation of procedures, including those relating to: (i) the exercise of data subjects’ rights; (ii) the management and notification of data breaches to both the supervisory authority and affected individuals; (iii) the handling of CVs within the company; (iv) risk assessments of processing activities; (v) data protection impact assessments. Legal advice in relation to complaints before the AEPD or claims brought by individuals or legal entities.
