Data protection and GDPR for businesses

I help establish what personal data your company processes and what changes are needed to its practices or documents. I draft the agreed privacy documents and data processing agreements.

Niko Mäenpää

Finnish lawyer and Licensed Legal Counsel

Do you suspect a personal data breach? Call +358 50 323 3597. This service is not a 24-hour technical helpline.

HOW I CAN HELP

Documents, practices or an incident?

Data protection work begins with how your company operates. The service may cover a single document, a review of your practices or the legal issues arising from a personal data breach.

Review of data protection practices

I establish the purposes for which personal data is used, the allocation of responsibilities and current practices. I assess the changes required, including whether a Data Protection Officer (DPO) needs to be appointed.

Current-state review · staff guidance · responsibilities

Privacy notices and data processing agreements

I draft or review a privacy notice or data processing agreement (DPA). The document is tailored to your company’s activities and the roles of its service providers.

Privacy notice · data processing agreement · service-provider terms

Legal support for a personal data breach

If a personal data breach occurs, I help assess notification obligations and the information that must be recorded. Technical investigation should be handled by an IT specialist.

Incident assessment · notifications · documentation

FEES

How is data protection work priced?

The fee depends on the scope of the work. Preparing a single privacy notice or data processing agreement is a different assignment from reviewing several systems and business practices.

What does the agreed work include?

We agree the scope and either a fixed fee or fee estimate before work begins. A fixed fee covers a defined assignment. The free initial assessment helps determine the scope; a full data protection audit is a separate engagement.

Scope of processing

What personal data is processed and for what purposes?

Systems and partners

How many systems and service providers are involved?

Existing documents

What has already been done, and what needs to be drafted or corrected?

BEFORE INSTRUCTING ME

Practical questions

Can the work cover only one privacy notice?

Yes. A limited engagement may cover a privacy notice, data processing agreement or individual question. I will still need information about the activities that the document is intended to describe.

Can I use another company’s privacy notice as a template?

It may help illustrate the structure, but it may describe different purposes, systems or retention periods. Your privacy notice must reflect how your own company actually processes personal data.

How does data protection differ from information security?

Data protection work addresses the legal basis for processing personal data, the allocation of responsibilities and relevant practices. Protecting technical systems and investigating the technical aspects of a breach may require an IT specialist.

What should I do if a personal data breach is urgent?

Call and explain what happened and when the breach came to your attention. Notification obligations and deadlines must be assessed without delay. This is a legal support service, not a 24-hour technical helpline.

GUIDES

Data protection guides for businesses

Read more about the lawful bases for processing personal data, relevant agreements and incident response. In addition to the general guidance, your company’s own practices and obligations must be assessed separately.