The EU General Data Protection Regulation (GDPR) entered into force on 25 May 2018. This legislation of almost 100 pages was intended to raise data protection in the European Union (EU) to a new, improved level of protection.

In principle, the GDPR applies to anyone who processes personal data wholly or partly by automated means, as well as to anyone who does not process personal data automatically but stores it in a filing system.

Exempt, among other things, is the processing of personal data in the course of purely personal or household activities. This means, for example, that the private contact details of friends and colleagues on your mobile phone may still be used without having to comply with the GDPR.

By contrast, the GDPR applies in principle to every business, whether a small craft business, a car repair shop, a manufacturing company, a medical practice or a hotel. Almost every business has an electronic customer and employee file. Even if these are kept by hand, the GDPR applies.

In other words, the GDPR applies to every business, more strongly to some and less so to others.

At SCHEIBER CONSULTING, we assess your data protection status and, on that basis, support you in implementing the necessary data protection measures. We use tailor-made solutions for your business.

Experience has shown that many businesses are familiar with the GDPR. To this day, however, many do not know what actually needs to be done. SCHEIBER CONSULTING explains it to you in simple terms.

The new Austrian Data Protection Act (DSG) does provide that penalties may not be imposed immediately and only proportionately when businesses breach provisions of the GDPR. This apparent leniency has recently led businesses to forgo compliance with the GDPR or to postpone it for the time being.

However, businesses should not be lulled into a false sense of security. On the one hand, the Austrian DSG undermines the level of protection of the GDPR. This would be contrary to EU law and would mean that Austrian authorities and courts may not take it into account. On the other hand, this rule does not cover civil claims for damages. It has already become apparent that more and more claims for damages with high demands are being filed against businesses. Some lawyers have specialised in asserting such claims. Civil proceedings of this kind can therefore become very expensive for businesses. All the more reason to make your business data-protection-ready now.

SCHEIBER CONSULTING is your partner for implementing data protection in your business.

Our services include:

  • Assessment of your company's data protection status
  • Risk assessment
  • Advice on technical and organisational measures (TOMs) for implementing data protection
  • Preparation of a record of processing activities, deletion concept, data protection impact assessment and emergency plan
  • Employee training
  • Support as external data protection officer