LOPD Consulting Service

Need help implementing the LOPD in your organization?

Reference consulting

From Audisec and GlobalSUITE® we work in a comprehensive consultancy for compliance with LOPD (Organic Law on the Protection of Personal Data) through professionals CISA, CISM, CDPP, etc. who have more than 10 experience in LOPD implementation services in all kinds of organizations and sectors of activity.

Our Team

Our team has more than 15 years of experience and is made up of:

Lawyers and engineers
Lead Auditor, ISO 27001, ISO 20000, ISO 22301, Lead Implementer.
DPD Certification
CISA, CISM, CGEIT, CRISC
PMP, ITIL, CDPP, COBIT 5 Foundations

At GlobalSUITE Solutions we have more than ten years of experience in the implementation of LOPD in all kinds of organizations and sectors of activity. Our role is to help your company comply with these regulations, not as a photograph of the moment in which the implementation is made, but as a true collaborator who will ensure that compliance with the LOPD, in addition to cash and real is not a ballast organization.

Working methodology

The platform allows qualitative and quantitative dimensions, the parameterization of the Risk Calculation, templates of a predefined methodology and catalogs of Predefined Risks and Measures.

Work teams

Gap Analysis, Compliance Plan Generation, Audit Management
Historical reports and current situation, traceability of all associated information in the system

Security Document

Definition, classification and valuation of data processing,
Orientation to the organizational structure, Configuring categories and dimensions of the elements

The purpose of Audisec’s comprehensive consultancy is, after a thorough analysis of your organization, to develop and implement all the documents and procedures that the LOPD requires. Always with a practical point of view, doing a modern consultancy, ensuring legal compliance, and with the concern of bringing value and improvement to your organization.

Our consulting projects address the following aspects:

Registration, modification or deletion of files before the Spanish Data Protection Agency.

Review and analysis in the client’s offices of the files subject to registration, modification or deletion before the General Register of Data Protection guaranteeing the notification established in Article 26 of the LOPD. Drafting and presentation of the necessary documentation for registration, modification or decommissioning in the General Data Protection Register.

Drafting the Security Document

The Security Document is mandatory in all companies that process personal data, Audisec will write to you the same containing the security measures required at any of its levels of protection.

In-person controls in our clients’ offices

This is one of our main assets, the presence of our actions, also giving compliance to the obligation to keep the Security Document updated at all times.

Drafting and review of all contracts necessary to comply with Art.12 of the LOPD.

Preparation or, where appropriate, review of contracts for the provision of services to regulate the access and processing of data on behalf of third parties that the client maintains with external companies.

Drafting of information and confidentiality clauses.

Drafting or revision of legal clauses and general recommendations for compliance with LOPD principles (information in collection, consent, duty of secrecy, data transfers, etc.)

Management of passwords and records as established by the LOPD.

Advice for the keeping of the mandatory records established by the LOPD, as well as the management and storage of passwords in accordance with that standard.

Biennateal audits of declared mid- or high-level files.

Biennative audit of files containing data classified as medium/high level legally required, both automated and paper files.

Formation of the figure of the Security Officer.

The Security Officer is a key part of the entire data protection system and as such we will advise and form on the functions established in the current legislation so that this figure correctly complies with and develops its obligations.

Adequacy of the website to the LOPD.
Adequacy of the website to the LSSICE.

Advice to the CLIENT considered an Information Society Service Provider in accordance with the Law on Information Society Services and Electronic Commerce on the procedures to be followed to adapt its website to the requirements of said Law.