In May 2018, the Privacy Protection Regulations (Data Security) came into effect, which apply to every entity in Israel.
and EU legislation – GDPR, which applies to any organization that holds and processes data on EU citizens and residents, regardless of the organization's location.
The Privacy Protection Authority will begin operating a new system that will conduct audits of several bodies holding a large amount of personal information.
Serious violations of the law may lead to the initiation of administrative or criminal enforcement proceedings, depending on the authority's jurisdiction and discretion.
The dangers involved in this offense:
Damage to reputation and customer churn.
Market and customer loss due to the requirement for legal compliance as a condition for business engagement.
Damage claims and class action lawsuits
And from the Europeans' side:
Fines of up to 4% of turnover or 20 million euros—whichever is higher!
At Barzel & Co., CPAs, we offer a wide range of privacy protection services, including:
- Analysis and mapping of organizational processes to identify sensitive data and processes – Data Protection Impact Assessment
- Mapping and classifying the organization's databases to define the required level of protection.
- Preparing a gap analysis report between the current situation and regulatory requirements.
- Preparing a detailed action plan to address gaps.
- Update and write necessary procedures, such as a data breach incident reporting procedure.
- Preparation and delivery of training sessions.
- Providing recommendations to the legal department regarding changes and additions required in the engagement agreements.
and additional services:
- Conducting an information security survey.
- Penetration testing.
- Assessment of the organization's readiness to meet regulatory requirements.
- Consultation and ongoing support for the organization.
