Data protection and GDPR support

Personal data protection requires organisational and technical measures. A Cloud subscription alone does not establish GDPR compliance.

Scope the work

We help review access, sharing, retention and working practices in Microsoft 365. Deliverables, responsibilities and any DPO or legal advisory role are defined in the proposal.

DPO designation

There is no general 250-employee threshold for appointing a DPO. Article 37 sets criteria that include public bodies and certain large-scale monitoring or sensitive-data activities. Each organisation needs to assess its situation.

GDPR, Chapter IV — CNIL · Contact