Compliance

We support our clients by carrying out audits of personal data practices and processing (carrying out an inventory of the treatments implemented, impact analyses), in order to advise them on the measures to be taken.

We advise our clients on appropriate technical and organizational measures to ensure compliance with the principle of accountability (creation of a register of processing activities, appointment of a manager — DPO — to ensure the governance of personal data, creation of an IT charter, awareness-raising of employees through training, etc.), and the implementation of procedures (notifications of data breaches, management of requests from persons concerned, complaints).

We offer our customers support in drafting their privacy and cookie management policies, their subcontracting and/or joint responsibility for processing contracts and, in general, the personal data clauses in all their contracts.

We represent our clients in disputes relating to the violation of applicable regulations on personal data, before the judicial and administrative courts, and in particular the CNIL.

We support both compliance audits and pre-acquisition (due diligence) audits of target companies in the following areas:

• Corporate
• IP/IT
• Contracts
• Real estate
• Employment law
• GDPR
• Tax

Our experienced team conducts acquisition audits with a pragmatic, business-oriented approach. We align our investigations with your external growth objectives to provide a clear and operational overview.

Concretely, we identify the key areas to be audited, conduct interviews with senior management, organise and lead Q&A sessions, and produce audit reports highlighting actual risks as well as our recommendations for remediation.

Our goal: to enable you to make informed decisions with a full understanding of the relevant issues.

We advise on governance matters, including:

• Gender equality (Women/men equality index)
• Diversity and inclusion
• Drafting and implementation of delegation of authority frameworks
• Internal regulations, ethical charters, codes of conduct, IT policies, and social media policies

We also assist with the collection and handling of alerts, including:

• Prevention and management of workplace bullying (moral harassment), sexual harassment, discrimination, and psychosocial risks
• Implementation of whistleblowing systems (CSE alerts, ethics alerts, Sapin II compliance, harassment and psychosocial risk reporting channels, etc.)
• Development of internal investigation procedures and guidelines (investigation committees, investigative methods, investigator’s code of conduct, etc.), and handling of reports

We advise on whistleblower status and support crisis management situations.