Board Effectiveness Reviews
Providing an independent perspective to help boards identify improvements and reach their full potential.
Outsourced Subject Access requests (SAR)
Satisfying subject access requests can require a very significant amount of time and effort. Gathering the data, filtering out the irrelevant records, making decisions on what is necessary to include and redacting information appropriately can turn one SAR into a project in its own right.
Outsource the management of individual's rights under the GDPR and remove the pain from subject access requests.
Data subject access requests
Manual review and redaction rates typically deliver 500-1000 items per person-day. Using a manual approach, the effort to manage SARs with 50,000, 100,000 or more items can become unmanageable within the 30- or 90-day response periods. With that volume of information to be reviewed, the risk of error increases, especially where untrained persons are undertaking the review.
Forvis Mazars provides an efficient and robust response to SARs that includes:
- Use of a suit of forensic and eDiscovery tools to capture data, filter out large numbers of non-relevant items and minimise the number of items requiring manual review, decisions and redaction.
- Access to data protection experts to support decisions around the requirement to release data.
- Project management to deliver within the mandated timeframe.
- Advice on engaging with data subjects and the Data Protection Commissioners where required.
27 February 2025
10 Data Privacy Predictions for 2025
Each year, International Data Privacy Day takes place in January, aiming to raise awareness and promote privacy and data protection best practices. To mark the event, here are our top 10 privacy predictions for 2025.
Data protection newsletter - Issue 20
Welcome to the latest edition of the Forvis Mazars Data Protection Newsletter where we provide timely insights and updates on key developments in data protection and compliance. This issue explores several critical topics that organisations must address in the year ahead including the upcoming enforcement of the AI Act and its implications for responsible AI governance.
Contact
Liam McKenna Partner, Consulting - Dublin
Outsource Data Protection officer (DPO)
Forvis Mazars provides outsourced data protection officer (DPO) services to organisations that do not wish to directly employ a DPO
Data protection by design and by default
The general data protection regulation (GDPR) provides for two crucial concepts for future project planning: Data Protection by Design and Data Protection by Default (DPbDD). While long recommended as good practice, both principles are enshrined in law under Article 25 of the GDPR. Our expert team can guide you though the approach and process of building privacy by design into your products, services...
GDPR audit
A GDPR audit provides you with assurance of your data protection compliance efforts.
Forvis Mazars | Europrivacy ™
Forvis Mazars has partnered with Europrivacy to provide companies with General Data Protection Regulation (GDPR) compliance certifications. This is the first GDPR certification to be created since the launch of the GDPR four years ago, and has been authorised by the European Data Protection Board (EDPB). This certification positions companies as front-runners in data protection with a strong competitive...
Data protection impact assessments (DPIA)
Forvis Mazars DPIA methodology has been developed using years of experience, ensuring that risks are identified and mitigated in line with business needs while keeping a focus on individuals.
Process automation & digitalisation
A strategic, cutting edge approach to increasing efficiency
Cyber security
Build technological resilience so you can operate with confidence
Responsible AI & EU AI Act Compliance
Our expertise and approach to responsible AI will ensure your business or organisation is compliant with the EU AI Act.