Data Protection and Data Security

Data protection regulations and business interests do not always harmonize with one another. That is equally valid for the data of your employees as well as for customer data. Especially due to the validity of the EU General Data Protection Regulation (GDPR) from May 25, 2018 onwards, companies must rethink their handling of personal employee and customer data and adapt this to the changed legal framework conditions. Those, who have not already done this, should act as quickly as possible: the failure to implement the EU General Data Protection Regulation (GDPR) can be met with considerable fines. In critical cases this can amount to up to 4% of the total worldwide annual revenue. So that you are within the legally secure framework – as a lawyer Andreas Leupold advises companies and corporations in all legal questions of data protection and data security, in particular in the following areas:

• Compliance with the EU General Data Protection Regulation (GDPR)
• Compliance with the German Data Protection Act (BDSG)
• Ensuring that service providers, subcontractors and employees comply with the EU General Data Protection Regulation and the Federal German Data Protection Act
• Contract Data Processing Agreements and Data Protection Agreements with service providers
• Employee data protection
• Collecting and processing of customer or client data for target group oriented approaching and the creation of user profiles
• Sale and use of address data for advertising purposes
• Telephone advertising and cold calls
• Protection of personal data on the internet
• Appointing a data protection officer (DPO)
• Secure storage of data (protection against loss and access by third parties)
• Advice and legal representation/litigation for enforcing rights resulting from the non-compliance with obligations as a contract data processor.

Dr. Andreas Leupold is the editor and co-author of the "Münchener Anwaltshandbuch IT-Recht" (Munich Lawyers’ Handbook IT Law) created for IT lawyers from the publishing house C.H. Beck. Due to his long representation of companies also in the areas of IT and e-commerce he is versed in all legal questions of data protection and their practical implementation.  In the case of data protection infringements he represents companies also in the fulfilment of their reporting requirements to supervisory authorities and affected persons and the data protection compliant restructuring and redesigning of their business processes