GDPR (General Data Protection Regulation)
GDPR is an EU regulation, but it can apply to organizations based outside the EU. Eagle specializes in helping organizations that must comply with GDPR alongside other privacy regulations, such as HIPAA, CCPA, and PIPEDA.
Where HIPAA ends and GDPR begins.
Organizations such as academic medical centers that treat patients from abroad, or cloud vendors that serve international clients, are likely subject to GDPR.
HIPAA and GDPR overlap in protecting the confidentiality of people who receive healthcare. But GDPR goes further in two important ways. It requires safeguards for personal data of any EU resident, including a contact at an EU vendor. And it gives individuals rights HIPAA does not, such as the right to be forgotten.
Eagle helps you understand where your obligations overlap and where they differ, so you can build one program that satisfies both.
GDPR compliance services.
Policies and procedures
GDPR policies and procedures customized to your organization and aligned with your HIPAA program.
Risk assessments
GDPR risk assessments that identify where personal data lives and how it is protected.
Implementation support
Hands-on help putting required processes and safeguards in place.
Data Protection Officer (DPO) Services
Eagle can serve as your virtual Data Protection Officer, which is valuable for organizations too small to hire a full-time DPO.
How we approach GDPR.
Scope
Confirm whether and how GDPR applies to your organization.
Assess
Map personal data and evaluate current safeguards and processes.
Build
Customize policies and procedures that work alongside HIPAA.
Implement
Support rollout of the processes and controls you need.
Often paired with
HIPAA Policies and Procedures Development
HIPAA Privacy and Security policies built from proven templates and tailored to you.
Learn more →Security Risk Assessment
Identify threats to sensitive data and document the risks regulators expect you to know.
Learn more →Security Policies and Procedures
Security policies sized to your organization and mapped to your frameworks.
Learn more →Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation