Conas is féidir linn cabhrú leat?

Beidh ar gach cuideachta gan oifigí san AE agus/nó sa RA Ionadaí GDPR Airteagal 27 a cheapadh, má phróiseálann siad sonraí pearsanta daoine aonair atá lonnaithe san AE/RA.

Beidh ar chuideachtaí AE nach bhfuil oifigí acu sa RA Ionadaí GDPR a cheapadh sa RA má phróiseálann siad sonraí pearsanta daoine aonair atá lonnaithe sa RA.

Beidh ar chuideachtaí RA gan oifigí in aon bhallstáit AE Ionadaí GDPR AE a cheapadh má phróiseálann siad sonraí pearsanta daoine aonair atá lonnaithe san AE.

Tá feidhm ag na ceanglais dhlíthiúla seo maidir le beagnach gach cuideachta lena n-áirítear seirbhísí airgeadais, gnó agus dlí, miondíola ar líne, margaíocht agus táirgí adtech, teicneolaíocht, iompar agus eitlíocht, trialacha cliniciúla, seirbhísí sláinte agus diagnóiseacha, fógrán fianán-bhunaithe, chomh maith le seirbhísí digiteacha, mar sin de. mar aipeanna móibíleacha agus pobail ar líne.

Tugann an rialaitheoir sonraí nó an próiseálaí sainordú d’Ionadaí an AE go ndíreoidh, go háirithe, údaráis mhaoirseachta agus ábhair sonraí ar na saincheisteanna go léir a bhaineann le próiseáil [sonraí], i dteannta nó in ionad an rialaitheora nó an phróiseálaí. Feidhmíonn an tIonadaí mar phointe teagmhála áitiúil maidir le hábhair a bhaineann le cosaint sonraí agus príobháideacht, agus faigheann sé cumarsáidí ó údaráis mhaoirseachta um chosaint sonraí in imeachtaí oifigiúla, chomh maith le, mar shampla, iarrataí ó dhaoine is ábhar do na sonraí a gcearta GDPR a fheidhmiú.

Ní mór sonraí teagmhála d’Ionadaí Airteagal 27 a fhoilsiú i mbeartais phríobháideachta do chuideachta. Molaimid freisin go gcuirfidh tú ár sonraí le buntásc do shuíomh Gréasáin agus in aon doiciméadú ábhartha.

As your Article 27 Representative we need to complete our due-diligence and ensure we understand how you collect, store, and process data. We need to keep a copy of the company’s record of processing activity spreadsheet along with other key documents to help us understand how you operate. Upon request of a supervisory authorities, the Representative must cooperate with them and disclose the Article 30 documentation.

Ní shárófaí Airteagal 27 den GDPR agus tá na pionóis ionchasacha céanna i gceist mura gceapfaí Ionadaí AE.

Soláthróirí córais/samhlacha AI ó thríú tíortha (lasmuigh den AE).

Córais AI ard-riosca nó samhlacha AI ilfheidhme.

Múnlaí AI ilfheidhme saor in aisce agus foinse oscailte mura mbaineann rioscaí sistéamacha leo.

Is é Lúnasa '25 an dáta deiridh do mhúnlaí ilchuspóireacha AI agus is é Lúnasa '26 le haghaidh samhlacha AI ard-riosca.

Appointing an AI Authorized Representative (AR) before the mandatory deadline provides a strategic advantage by allowing you to organize your documentation and perform thorough risk assessments ahead of time. This proactive step not only ensures you’re fully prepared when the deadline arrives but also helps you avoid potential disruptions. By acting early, you demonstrate a commitment to responsible AI and gain a competitive edge in meeting the AI Act’s requirements. Additionally, this early appointment gives us ample time to review your documentation and offer timely, valuable insights to help you navigate registration requirements smoothly.

The role of an AI Authorized Representative (AR) is to serve as the EU-based point of contact for authorities, providing necessary information on the compliance of high-risk AI systems from providers outside the Union. Before these systems can be made available in the EU, the representative, appointed by written mandate, acts as the intermediary, making sure that AI providers meet regulatory requirements and maintain a level playing field for operators within the Union. Recital 82

The actual costs depends on the complexity of the AI system, the nature of the data processed, and the existence of existing compliance documentation or a Conformity Assessment. We offer a free risk assessment service to allow us to give you an accurate cost for the initial assessment, document storage, and ongoing representation. Assessments are totally free.

Faoi láthair, níl aon cheanglas sonrach sainordaithe ag Acht AI an AE chun sonraí Ionadaí AI a fhoilsiú. Dá réir sin, is féidir sonraí teagmhála d'Ionadaí Údaraithe AI (AR) a fhoilsiú i mbeartais phríobháideachta do chuideachta. Molaimid freisin go gcuirfidh tú ár sonraí le buntásc do shuíomh Gréasáin agus in aon doiciméadú ábhartha. Gheobhaidh tú freisin teastas ionadaíoch agus mandáid fhoirmiúil chun a dheimhniú go bhfuil muid ceaptha mar d’Ionadaí.

Ní hea, i gcás ina gceanglaítear ar Ionadaí bheadh sárú ar an Dlí maidir le AI Údaraithe (AR) dá loiceadh Ionadaí Údaraithe AI a cheapadh agus tá na pionóis ionchasacha céanna i gceist leis.

Use the Contact Us form below or simply email us at: contact@gdprlocal.com and we’ll walk you through the steps and arrange your free risk assessment meeting.

Is féidir linn seirbhísí a thairiscint duit mar:

• Mol comhlíonta AI (comhairliúchán AI 1 uair in aghaidh na míosa)
• AI Risk Assessment (Assess the risk of your AI systems/Models)
• AI Governance (Implement AI Governance Framework – AI Strategy, AI Policy, Risk management Framework…)
• Ionadaí AI (más soláthraí neamh-AE thú ar chóras AI ardriosca nó ar shamhail AI ilchuspóireach, is féidir linn ionadaíocht a dhéanamh duit ar mhargadh an AE)

Teastaíonn measúnú chun a chinneadh an bhfuil feidhm ag an Acht AI maidir le do chóras. Is féidir linn cabhrú leat anailís chuimsitheach a dhéanamh chun oibleagáidí rialála féideartha a shainaithint. I measc na bpríomhfhachtóirí tá:

• An úsáid atá beartaithe don chóras AI.
• An leibhéal riosca do dhaoine aonair nó don tsochaí.
• Cibé an dtagann an córas faoi chatagóirí sonracha arna sainiú ag an Acht AI.
• Cá háit a n-úsáidfear an córas AI agus cé a mbeidh tionchar ag an gcóras AI orthu.

Cuimsíonn ár bpróiseas measúnaithe riosca faoin Acht AI:

• System Mapping: Identifying the components and functionalities of your AI system.
• Risk Identification: Identifying potential harms that the system could cause.
• Risk Assessment: Evaluating the likelihood and severity of identified risks.
• Mitigation Planning: Developing strategies to mitigate identified risks.
• Documentation: Creating a comprehensive risk assessment report.

Bainimid úsáid as éagsúlacht modheolaíochtaí measúnaithe riosca bunaithe, lena n-áirítear ISO RMF 100.1, HUDERIA, FRIA, Algartam AI Assessment, agus eile.

The AI Act’s compliance timeline is phased. Some provisions will take effect earlier than others. We can provide a detailed breakdown based on your specific AI system. Key dates to consider include:

• Feabhra 2025: Tá feidhm ag toirmisc, sainmhínithe agus forálacha litearthachta AI áirithe.
• Lúnasa 2025: Tagann rialacha maidir le rialachas agus oibleagáidí maidir le AI ilchuspóireach chun bheith infheidhme.
• Lúnasa 2026: Tá na hoibleagáidí maidir le córais AI ard-riosca i bhfeidhm.

Yes, we can assist in developing a robust AI governance framework tailored to your organization.
Our services include:

• Policy Development: Creating comprehensive AI policies and guidelines.
• Risk Management: Implementing effective risk management practices.
• Ethical Framework: Establishing ethical principles for AI development and use.
• Compliance Monitoring: Ensuring ongoing adherence to regulations.
• Stakeholder Engagement: Building trust and transparency with stakeholders.

The EU AI Act imposes significant penalties for non-compliance. The severity of the penalty depends on the nature of the infringement.
Key Penalties:

• Non-compliance with prohibitions: Up to €35 million or 7% of total worldwide annual turnover for the preceding financial year, whichever is higher.
• Non-compliance with other requirements: Up to €15 million or 3% of total worldwide annual turnover for the preceding financial year.
• Providing incorrect or misleading information: Up to €7.5 million or 1.5% of total worldwide annual turnover for the preceding financial year.

These are maximum penalties, and the actual fine will depend on the severity of the infringement.

Member states will be responsible for setting specific penalties within these limits.

SMEs may be subject to lower penalties.

A conformity assessment is a process required under the EU AI Act to ensure that high-risk AI systems (HRAIS) comply with specific legal requirements before being placed on the EU market or used in the EU.
The key steps include:

• Risk Management System: Establishing and maintaining a system to manage risks throughout the AI system’s lifecycle.
• Technical Documentation: Developing and implementing detailed technical documentation for the AI system.
• EU Declaration of Conformity: Preparing and submitting this declaration to confirm compliance.

Tá dhá phríomh-mhodh ann chun measúnuithe comhréireachta a dhéanamh:

• Internal Conformity Assessments: Conducted by the provider, relying on established quality management systems and technical documentation.
• Third-Party Conformity Assessments: Required for certain high-risk systems like those involving biometric data, and conducted by a notified body, which is a designated third-party entity.

Is féidir fíneálacha, srianta margaidh, aisghairmeacha táirgí agus damáiste do chlú a bheith mar thoradh ar neamhchomhlíonadh.

The AI Act is a regulatory framework by the European Union (EU) that aims to establish rules and standards for the development, deployment, and use of artificial intelligence (AI) within the EU. Officially known as the “Artificial Intelligence Act,” it seeks to ensure that AI systems are safe, transparent, and respect fundamental rights.
The Act takes a risk-based approach, categorizing AI systems into different levels of risk:

• Unacceptable risk: Certain AI applications, such as those that manipulate people’s behaviour or exploit vulnerabilities, are outright banned.
• High risk: AI systems used in critical infrastructure, education, employment, law enforcement, and other areas with significant impact on people’s lives are subject to strict regulations, including conformity assessments.
• Limited risk: Certain AI systems, like chatbots, must disclose their AI nature to users.
• Minimal or no risk: Most AI applications fall into this category and face few to no regulations.

Yes – all our AI experts have appropriate training and certification including AIGP through IAPP.

The EU AI Act is set to significantly impact businesses operating within or targeting the EU market.
The main steps that companies should make would be:

• Do Chórais AI a Thuiscint
• Creat Eitice/Rialachas Sonraí/Trédhearcacht agus Mínitheacht/Maoirseacht Dhaonna a bhunú
• Treochlár Comhlíonta
• Gníomhartha Bunaithe ar Riosca Córas AI
• Monatóireacht agus Oiriúnú Leanúnach

We offer a range of services from simple compliance queries, helping manage a single data protection complaint, supporting clients responding to a due-diligence request through to complete compliance implementation programmes. We provide full DPO services, consultancy, training, documentation, emergency response support, and of course support for companies facing a Regulator investigation. We have many years experience in all aspect of data protection and can help with any issue.

If you collect, store or process data relating to a person living in the UK or EU then GDPR will apply. There are very few exceptions. In addition to GDPR other local regulations may apply, often with more stringent obligations than GDPR. Contact us anytime for a free consultation.

Data protection frameworks are being adopted by countries across the world. The data protection landscape is complex and changing rapidly. You will need to comply with all applicable regulations, this will depend on the nature of your system, the data you process, the location of your data subjects and even potentially your choice of partners, third-parties, and suppliers. The short answer if that you need to comply with all applicable regulations. Contact us anytime to discuss.

We can help with all data protection frameworks. Our team of global data protection consultants have experience in all frameworks with all types of companies across the world. We can help with any standard, any issue, any request.

Yes, we offer a range of services from initial assessment through to ongoing compliance Governance. We have developed a number of governance frameworks to ensure our clients meet their compliance obligations now and into the future.

Penalties vary depending on the nature of the breach, the jurisdiction, and the Regulator or Supervisory Authority involved. Fines are designed to be punitive so always best avoided however reputational damage and business disruption are often more significant and can have longer term impact.

Our well worked compliance approach ensures we address all aspects of GDPR and is designed to ensure you meet your ongoing compliance due-diligence requirements. Our approach keeps you fully compliant with GDPR and makes sure you stay on top of all your ongoing data protection responsibilities.

Cosnaíonn an tseirbhís OCS £150 in aghaidh na huaire, agus de ghnáth molaimid 6 go 8 n-uaire an chloig chun do chuid riachtanas a chlúdach go héifeachtach. Cinntíonn sé seo go bhfaigheann tú tacaíocht críochnúil agus solúbthacht a choinneáil bunaithe ar do riachtanais ar leith.

Tá 15 DPO deimhnithe againn ar ár bhfoireann, agus tá céimeanna dlí acu go léir agus speisialtóireacht i gcosaint sonraí. Cinntíonn a saineolas go láimhseáiltear cosaint sonraí d’eagraíochta leis an leibhéal is airde gairmiúlachta agus eolais dhlíthiúil.

Tá Oifigeach Cosanta Sonraí (OPO) freagrach as maoirsiú a dhéanamh ar straitéis cosanta sonraí na heagraíochta agus as comhlíonadh na gceanglas GDPR a chinntiú. Déanann siad faireachán ar ghníomhaíochtaí próiseála sonraí, soláthraíonn siad treoir maidir le measúnuithe tionchair ar chosaint sonraí, agus gníomhaíonn siad mar phríomhphointe teagmhála idir an eagraíocht agus na húdaráis rialála. Ina theannta sin, tá sé de chúram ar an OCS an fhoireann a oiliúint maidir le hoibleagáidí cosanta sonraí agus aon fhiosrúcháin nó gearáin a láimhseáil maidir le príobháideachas sonraí.

Soláthraíonn Mol Comhlíonta rochtain duit ar thairseach comhlíonta tiomnaithe inar féidir leat duine dár saineolaithe GDPR agus Cosanta Sonraí a roghnú. Cabhraíonn siad le gach rud ó dhoiciméadú a nuashonrú go láimhseáil saincheisteanna casta um chosaint sonraí, lena n-áirítear sáruithe ar shonraí agus imscrúduithe rialtóra.

Sea, tá tairseach ar líne againn atá nua-aimseartha agus éasca le húsáid. Tá sé deartha chun do phróisis chomhlíonta a chuíchóiriú agus rochtain éasca a sholáthar ar na hacmhainní riachtanacha go léir. Cinntíonn ár dtairseach eispéireas gan uaim chun do riachtanais um chosaint sonraí a bhainistiú go héifeachtach.

Athraíonn costas ár seirbhísí ag brath ar cibé an roghnaíonn tú coimeád míosúil nó tionscadal GDPR saincheaptha. Le haghaidh faisnéise praghsála mionsonraithe agus chun an rogha is fearr a fháil do do chuid riachtanas, déan teagmháil linn go díreach. Beidh áthas orainn luachan saincheaptha a sholáthar bunaithe ar do shainriachtanais.

Tá an tseirbhís seo deartha chun freastal ar sheirbhís Ionadaí Cosanta Sonraí na hEilvéise atá ina hoibleagáid faoi Airteagal 14 den Acht Cónaidhme um Chosaint Sonraí san Eilvéis (FADP) le héifeacht ón 1 Meán Fómhair 2023.

Ní gá duit Ionadaí Cosanta Sonraí a cheapadh san Eilvéis ach amháin má tá feidhm ag na nithe seo a leanas UILE:

• Próiseálann d’eagraíocht sonraí pearsanta daoine aonair san Eilvéis
• Níl aon sainchónaí ar d'eagraíocht san Eilvéis
• Is rialtóir sonraí í d'eagraíocht (agus ní próiseálaí sonraí)
• Tá baint ag an bpróiseáil sonraí a dhéantar ar shonraí pearsanta daoine aonair san Eilvéis le tairiscint earraí nó seirbhísí nó le faireachán ar iompar daoine san Eilvéis
• Tá an phróiseáil sonraí ar scála mór
• Déantar an phróiseáil sonraí go rialta
• Cruthaíonn an phróiseáil sonraí riosca ard do phearsantacht na n-ábhar sonraí

Mar gheall ar nádúr ról Ionadaí na hEilvéise i gcomparáid leis an ról sin faoi GDPR, tá an pacáiste seo ábhartha is cuma cé mhéad duine is ábhar do shonraí na hEilvéise a phróiseálann tú sonraí pearsanta dóibh, agus cibé an bpróiseálann tú nó nach bpróiseálann tú sonraí pearsanta de chatagóir speisialta (m.sh. leighis, eitneachas, reiligiún, ciontuithe coiriúla srl) dóibh.

D’fhéadfadh go mbeadh ar gach cuideachta gan oifigí san Eilvéis Ionadaí a cheapadh, má phróiseálann siad sonraí pearsanta daoine aonair atá lonnaithe san Eilvéis.

Tá feidhm ag na ceanglais dhlíthiúla seo maidir le beagnach gach cuideachta lena n-áirítear seirbhísí airgeadais, gnó agus dlí, miondíola ar líne, margaíocht agus táirgí adtech, teicneolaíocht, iompar agus eitlíocht, trialacha cliniciúla, seirbhísí sláinte agus diagnóiseacha, fógrán fianán-bhunaithe, chomh maith le seirbhísí digiteacha, mar shampla. mar aipeanna móibíleacha agus pobail ar líne.

Tugann an rialaitheoir sonraí nó an próiseálaí sainordú don Ionadaí go ndíreoidh an t-údarás maoirseachta agus na daoine is ábhar do na sonraí go háirithe air, i dteannta nó in ionad an rialaitheora nó an phróiseálaí, ar gach saincheist a bhaineann le próiseáil [sonraí]. Feidhmíonn an tIonadaí mar phointe teagmhála áitiúil maidir le hábhair a bhaineann le cosaint sonraí agus príobháideacht, agus faigheann sé cumarsáidí ón údarás maoirseachta um chosaint sonraí in imeachtaí oifigiúla, mar aon le hiarrataí, mar shampla, ó dhaoine is ábhar do na sonraí lena gcearta cosanta sonraí a fheidhmiú.

Ní mór sonraí teagmhála d’Ionadaí a fhoilsiú i bpolasaithe príobháideachais do chuideachta. Molaimid freisin go gcuirfidh tú ár sonraí le buntásc do shuíomh Gréasáin agus in aon doiciméadú ábhartha.

As your Representative we need to complete our due-diligence and ensure we understand how you collect, store, and process data. We need to keep a copy of the company’s record of processing activity spreadsheet along with other key documents to help us understand how you operate. Upon request from the regulator the Representative must cooperate with them and disclose required documentation.

Ní féidir, bheadh sárú ar rialacháin ann dá dteipfeadh ar SwissRep a cheapadh agus d’fhéadfadh pionóis thromchúiseacha a bheith i gceist leis.