Contact Us

Codes of conduct (Art. 40 GDPR)

We work alongside trade associations and representative bodies in developing codes of conduct on the protection of personal data under Article 40 of the GDPR and in taking them through approval. In the GDPR ecosystem, a code of conduct is an instrument shared between the members of the association that promoted it, who undertake to comply with it, which translates the principles of the GDPR into the concrete practices of those members and simplifies the compliance obligations of individual operators. A code of conduct can be a distinguishing element of accountability and of trust towards data subjects and the market. We handle the analysis of the processing activities typical of the sector, the drafting of the content and of the implementing measures, the definition of the monitoring bodies provided for by the legislation and the management of the approval process before the supervisory authority.