GDPR compliance programme for Relaybase
Records of processing, DPAs, transfer assessments and a privacy notice that matches reality. A case study by Lena Hoffmann, Commercial & Privacy Lawyer (GDPR).
Challenge
Relaybase, a customer messaging platform, started selling to European enterprises and was failing security and privacy questionnaires.
Solution
I mapped data flows with the team, created records of processing, negotiated DPAs with key vendors, prepared transfer impact assessments and rewrote the privacy notice.