

PERSONAL DATA PROTECTION
We are aware that the proper use of information has never been more vital. That is why we offer a wide range of advisory services to help you comply with the legal requirements regarding the protection and security of personal data that your company uses from its various stakeholders, as well as to develop a data management governance strategy.
From the moment a new law is proposed, through compliance processes or coercive actions, to privacy disputes and litigation, we can assist you.
Whether it is the Organic Law on Personal Data Protection of Ecuador (in effect since May 2021) or other privacy protection laws such as the well-known General Data Protection Regulation (GDPR) of Europe, data breaches, data transfers, or the use of cookies, Meythaler & Zambrano will provide trusted strategic advice.
Our services primarily include the following:
01
Legal Advice and Compliance
-
We provide you with specialized advice on data protection, analyzing your specific needs and helping you to implement appropriate measures to comply with current regulations.
- We will also keep you abreast of the latest regulatory updates so that you are always up to date.
02
Gap and risk assessment audits
-
We conduct data protection audits to assess compliance with the law and identify deficiencies and risks. Based on this assessment, we establish corrective and preventive measures.
-
Additionally, we offer training to your company's staff on data protection processes and programs, review and manage compliance with legal obligations such as the record of processing activities (RAT) and updates to the National Registry of Personal Data Protection.
-
We also optimize confidentiality and data transfer or communication contracts.
03
Legal Support and Q&A
-
We provide legal support in cases involving requests, petitions, complaints, or claims made by individuals or in administrative processes initiated by the data protection authority.
-
We assist you in legal contingencies related to information leaks or security breaches and in notifying the authorities of security breaches.
-
We also support you in administrative processes requiring approval or authorizations, such as international data transfers, and in inspections, sanctioning processes, corrective measures, or information requests from the Authority.
-
We respond to inquiries from your clients regarding the use and purpose of their data and assist you in appointing data protection officers when necessary.
04
Risk Identification and Compliance Analysis
-
We conduct comprehensive analysis of the legal risks associated with the processing of personal data in your company.
-
We evaluate your internal processes, privacy policies, contracts, and agreements from a legal perspective to ensure compliance with current regulations and assist you in adapting to the data protection system.
05
Elaboration of Policies and Legal Documentation
-
We assist you in developing customized privacy and data protection policies that meet the specific needs of your business.
-
Additionally, we draft and review contracts, confidentiality clauses, and privacy notices to ensure adequate protection of personal data.
06
Training and Awareness
-
We organize workshops and training sessions for your team, with the aim of raising awareness about the importance of data protection and providing clear guidelines for its proper handling. This includes best practices, security procedures, and response measures to potential security breaches.
07
Incident Management and Security Breach Response
-
In the event of a security breach or incident related to personal data, we provide immediate assistance to assess the impact from a legal point of view, manually from a technical point of view of information security, and thus take measures to comply with the legal obligations of notification and management of incidents.