Privacy & data protection
With the European data privacy directive and its transpositions in local law, in addition to the local law of 5 April 1993 on the financial sector and regulatory requirements regarding Bank secrecy, Luxembourg is probably one of the countries placing the highest demands on organizations with regard to privacy and protection of data.
Some cases over personal information and disclosure of confidential data have already been brought to court, causing significant reputational damage to the organizations involved. The impact can be of such a nature that the organization can be caused to end business.
With this level of risk, reducing exposure to threads and vulnerabilities by adequately managing risk and ensuring the necessary controls are in place and functioning is crucial.
Our team can help you understand the key factors for reducing exposure to critical risks and potential damage to your brand, including help in the following areas:
- Privacy and data protection strategy
- Building an organization-wide inventory and classification map of personal data and other business confidential data
- Policies and procedures
- Training and awareness
- Cross-border data transfers
- Data retention
- Compliance with legal and regulatory requirements
- Building privacy and data protection controls into IT projects
- Managing multiple international compliance requirements
- Audit and monitoring programs for ongoing data protection compliance
Material on this website is © 2013 Deloitte Global Services Limited, or a member firm of Deloitte Touche Tohmatsu Limited, or one of their affiliates. See Legal for copyright and other legal information.
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee, and its network of member firms, each of which is a legally separate and independent entity. Please see www.deloitte.com/about for a detailed description of the legal structure of Deloitte Touche Tohmatsu Limited and its member firms.