Active promotion of privacy awareness
As a proactive confidential advisor:
-
You provide information on privacy rights and the importance of careful handling of data;
-
You identify blind spots in team culture and systems;
-
You organize accessible Q&A sessions on privacy and confidentiality;
-
You integrate privacy topics into onboarding, leadership training, and performance reviews.
Assessment of AVG practice and policy
The proactive confidential advisor:
-
Monitors data minimization in the recording of confidential conversations;
-
Advises HR and management on secure storage and access to sensitive information;
-
Contributes to the annual updating of internal privacy policies;
-
Periodically reminds management of the data breach notification obligation and other requirements.
Confidential handling of personal data
You process data only:
-
With the explicit consent of the data subject;
-
For the purpose for which it was provided;
-
Limited to what is necessary for support;
-
In secure systems with restricted access.
You always discuss in advance:
-
What you record;
-
What you store;
-
What you may share – and with whom.
Knowing when things go wrong: data breach notification
A data breach is any situation in which personal data is unintentionally disclosed or lost. As a confidential advisor:
-
You quickly recognize when a (potential) data breach has occurred;
-
You report it according to internal procedures to the Data Protection Officer (DPO) or responsible party;
-
You advise on follow-up actions and awareness measures.
Supporting employees’ rights
You inform employees of their rights:
-
Access, correction, and deletion of personal data;
-
Objection to processing;
-
The right to clear information on what happens with their data.
As a proactive confidential advisor, you help employees understand these rights and, if necessary, exercise them.
Collaboration with third parties
If you work with other confidential advisors, HR, or external specialists:
-
Ensure a clear data processing agreement;
-
Agree on how data is shared, stored, and deleted;
-
Remain critical of proportionality and necessity.
In conclusion
AVG compliance is not a one-time action but an ongoing practice. The proactive confidential advisor ensures that confidentiality is maintained, that privacy is embedded in the culture, and that employees feel safe knowing their data is in good hands.