Bring the Privacy Policy in your company by trusting the experts of Kreston BulMar.
With our special service every company can rapidly implement it and afford it!

On May 25, 2018 the General Data Protection Regulation, known as the GDPR entered into force. It does not matter whether you are registered as a personal data administrator or have the capacity of a processor -EVERY BUSINESS WHO WORKS WITH PERSONAL DATA OF INDIVIDUALS IS OBLIGED TO COMPLY WITH THIS REGULATION. Every company needs to analyze its processes related to the processing of personal identification information, assess the risk of data protection, and implement the necessary procedures for their processing and protection.

Project Phases

Some of the myths and misconceptions regarding GDPR compliance process

• Myth No. 1: GDPR is yet another administrative burden on companies.
  Absolutely NOT! The spirit of GDPR is not to create additional administrative burden, but to introduce a uniform EU-wide rules and procedures on personal data processing. Moreover, the Regulation even exempts companies employing up to 250 people from having to keep certain registers in order to reduce the administrative burden on them.
  Many consultants and analysts who are not well familiar with GDPR, or perhaps willing to earn more based on people’s fear, try to create the impression that GDPR compliance is a very difficult process to implement and is very cumbersome from an administrative point of view.
  It should be noted that the GDPR does not differ significantly from the current Directive or from Bulgari’s Personal Data Protection Act, but simply unifies the rules throughout the Union and enforces with enormous stringency their compliance.
  Last but not least, let's honestly say that every person would like to feel secure regarding their personal data, and this can be achieved with more order and rigor on those who are processing the same.
• Myth No. 2: The GDPR compliance process is a very complicated and long one.
  Yes, the process could be complicated and long, if you yourself set the goal to study GDPR and all guidelines and practices related thereto to build and implement your own internal rules to comply with the Regulation and avoid high penalties.
  However, if you hire a suitable consultant, the GDPR compliance process is done with much less effort and within much shorter deadlines –2-3 weeks.
• Myth No. 3: Using a consultant to get your trough the GDPR compliance process is very expensive.
  Yes, until recently, while services in the field were still exotic, the prices were very high – tens of thousands of Bulgarian leva, and the process continued for months.
  Excessive prices come from consultants who do not have available well-built methodology to quickly assess problem areas and quickly provide the necessary solutions because it takes them many, many man hours that the client has to pay. When selecting a suitable consultant with a well-built working methodology, the GDPR implementation is done at a very affordable price and for very short deadlines.
• Myth No. 4: GDPR compliance requires costly technological solutions
  Absolutely NOT! No such requirements are set anywhere in the GDPR. In general, it is sufficient for the company to create a good internal organization of personal data on licensed operating systems, networks and applications. A well-trained consultant will provide you with the appropriate processes to ensure that the personal data you maintain is reliably protected, in accordance with GDPR, with the available licensed operating systems, networks and applications.