{"id":2782,"date":"2026-06-01T10:36:51","date_gmt":"2026-06-01T10:36:51","guid":{"rendered":"https:\/\/sawaryn.com\/uslugi\/gdpr-annual-program\/"},"modified":"2026-07-14T16:43:02","modified_gmt":"2026-07-14T16:43:02","slug":"gdpr-annual-program","status":"publish","type":"service","link":"https:\/\/sawaryn.com\/en\/uslugi\/gdpr-annual-program\/","title":{"rendered":"GDPR Annual Program"},"excerpt":{"rendered":"<p>We start with an audit and organize documents and processes. Then we take over day-to-day operations: the Data Protection Officer (DPO), questions from departments, support for new projects, reviews, and training. <\/p>\n","protected":false},"featured_media":0,"template":"","meta":{"_acf_changed":false},"specialization":[1215],"practice_area":[],"class_list":["post-2782","service","type-service","status-publish","hentry","specialization-gdpr"],"acf":{"short_description":"We start with an audit and put documents and processes in order. Then we take on day-to-day support: the DPO role, questions from departments, support for new projects, reviews and training.","full_description":"<strong>We audit, organise and run GDPR support throughout the year.<\/strong>\n\nWe start with an audit and put documents and processes in order. Then we take on day-to-day support: the DPO role, questions from departments, support for new projects, reviews and training.\n\n&nbsp;\n<h2>CLIENT PROBLEM<\/h2>\nIn many companies GDPR \u201cexists\u201d, but nobody actually runs it. Documents become outdated, accountability blurs, and the topic returns with every campaign, system rollout, HR change or reorganisation.\n\n\u201cThe biggest problem is not a single document. The problem starts when nobody manages GDPR on an ongoing basis.\u201d\n\nA one-off implementation ages quickly. Tools, people and processes change - and with them, documents and decisions about data. In an annual programme, someone keeps watch day to day, so projects stay moving and responsibility does not \u201chang\u201d on a few people.\n<h2>MOST COMMON PROBLEMS \/ CHALLENGES<\/h2>\n<strong>Tile 1<\/strong>\n\n<strong>Documentation does not keep up with the company<\/strong>\n\nThe documents were created at some point, but they no longer reflect how you operate today. It is hard to tell what is current and what needs fixing.\n\nWe start with a diagnosis and organise the documents so they match the company\u2019s processes, tools and responsibilities.\n\nBenefit for the company: it is easier to get through inspections, tenders and partner audits.\n\nWithout action: an inspection, an incident or a new rollout will quickly expose the gaps.\n\n<strong>Tile 2<\/strong>\n\n<strong>There is no owner of the topic<\/strong>\n\nHR, IT, marketing, sales and administration all work with data, but nobody joins it up: who decides, who carries out the work, who approves.\n\nWe take over running the area: we clarify roles, set rules for cross-department collaboration and keep topics under control on an ongoing basis.\n\nBenefit for the company: less chaos and faster decisions, without wrangling over \u201cwhose task this is\u201d.\n\nWithout action: responsibility still sits with the management board - only without tools or support.\n\n<strong>Tile 3<\/strong>\n\n<strong>New projects bring new questions about data<\/strong>\n\nMarketing campaigns, CRM, HR, cloud, outsourcing, reorganisation, new sales channels - the topic returns every time.\n\nWe support new projects and quickly answer which steps are needed to move forward without unnecessary risk.\n\nBenefit for the company: projects move ahead without standstills.\n\nWithout action: every new initiative will come back with the same questions and rework.\n\n<strong>Tile 4<\/strong>\n\n<strong>You act reactively instead of keeping lasting order<\/strong>\n\nGDPR appears only when there is an incident, a customer question, an employment dispute or time pressure.\n\nWe run regular reviews and updates to catch problems earlier, instead of acting reactively.\n\nBenefit for the company: fewer crises and less last-minute work.\n\nWithout action: the cost of chaos grows with every emergency.\n\n<strong>Tile 5<\/strong>\n\n<strong>The team does not know how to act<\/strong>\n\nProcedures exist, but day-to-day work is left with guesswork, shortcuts and uncertainty.\n\nWe train people on examples from your work and set simple rules in processes so everyone knows how to act in typical situations.\n\nBenefit for the company: fewer mistakes, fewer rush questions, greater independence.\n\nWithout action: even good documentation will not work if nobody knows how to use it.\n\n<strong>Tile 6<\/strong>\n\n<strong>Every topic starts from scratch<\/strong>\n\nWith every new matter you go back to basics: who decides, what to check, which documents to prepare, whom to hand them to.\n\nWe define roles, organise registers and documents, and appoint one contact person for day-to-day matters.\n\nBenefit for the company: less wasted time and fewer last-minute topics.\n\nWithout action: GDPR will keep slowing projects down and burdening key people.\n<h2>HOW OUR SOLUTION WORKS<\/h2>\n<strong>How the GDPR Annual Program works<\/strong>\n\nFirst we check what is already in order with you and what needs improvement. Then we organise documents and processes. Finally we handle ongoing GDPR matters as the company changes.\n\n<strong>Current-state audit<\/strong>\n<ul>\n \t<li>review of documents, processes and responsibilities<\/li>\n \t<li>checking how data work looks across departments<\/li>\n \t<li>identifying gaps and agreeing what comes first<\/li>\n<\/ul>\n<strong>Outcome:<\/strong> A list of the most important gaps and a work plan for the start of the programme.\n\n<strong>Performing the DPO function<\/strong>\n<ul>\n \t<li>acting as Data Protection Officer<\/li>\n \t<li>handling DPO matters and documenting findings<\/li>\n \t<li>a contact point for departments and the management board on GDPR matters<\/li>\n<\/ul>\n<strong>Outcome:<\/strong> An external DPO and a clear day-to-day working model.\n\n<strong>GDPR documentation tailored to the company<\/strong>\n<ul>\n \t<li>preparing or updating policies, procedures, clauses and templates<\/li>\n \t<li>fitting documents to how the company actually operates<\/li>\n \t<li>embedding the rules in day-to-day work (so they are used)<\/li>\n<\/ul>\n<strong>Outcome:<\/strong> Up-to-date documents the company can actually use.\n\n<strong>Registers and processes put in order<\/strong>\n<ul>\n \t<li>organising registers and processing activities<\/li>\n \t<li>setting operating rules in key areas<\/li>\n \t<li>keeping registers and documents in order<\/li>\n<\/ul>\n<strong>Outcome:<\/strong> Consistent registers and a clear operating model in the main data-related processes.\n\n<strong>Ongoing support for departments<\/strong>\n<ul>\n \t<li>advice for departments and the management board<\/li>\n \t<li>handling everyday questions and organisational changes<\/li>\n \t<li>support for new projects, campaigns and system rollouts<\/li>\n<\/ul>\n<strong>Outcome:<\/strong> Faster answers and fewer blockers in projects.\n\n<strong>Regular reviews<\/strong>\n<ul>\n \t<li>reviews of selected areas<\/li>\n \t<li>checking what has changed and what needs fixing<\/li>\n \t<li>agreeing next steps<\/li>\n<\/ul>\n<strong>Outcome:<\/strong> Regular reviews instead of returning to the topic every few years.\n\n<strong>Training and team education<\/strong>\n<ul>\n \t<li>training for employees, managers and process owners<\/li>\n \t<li>translating rules into practical situations<\/li>\n \t<li>embedding an operating standard in the organisation<\/li>\n<\/ul>\n<strong>Outcome:<\/strong> A team that better understands its duties and makes fewer mistakes in practice.\n<h2>WHO THIS SERVICE IS FOR<\/h2>\n<strong>For companies that want GDPR in order without building the whole function in-house<\/strong>\n\nThe GDPR Annual Program is for companies that want orderly data protection and ongoing support, without adding the topic to the team\u2019s workload.\n\n<strong>Example 1 - for Olek<\/strong>\n\nThe company is growing marketing, launching new campaigns and rolling out further tools. It needs support that will not stop a project with \u201cit cannot be done\u201d, but will quickly show how to proceed in line with GDPR and move on.\n\nWhy this is for him: he gets fast decisions, support for new initiatives and less risk that growth builds a problem for later.\n\n<strong>Example 2 - for Bob<\/strong>\n\nThe company is growing and putting its operating model in order. It wants to clarify roles, processes, registers and responsibilities, and embed the DPO function in day-to-day work.\n\nWhy this is for him: he has ongoing support and fewer topics that return every few months.\n\n<strong>Example 3 - for Zosia<\/strong>\n\nThe person responsible for administration, HR or formal matters already has too many scattered topics. They need someone who will take over running GDPR, provide a clear plan and will not require the company to keep \u201cpulling\u201d the topic.\n\nWhy this is for her: she gets a predictable process and calm in an area that until now kept coming back endlessly.\n<h2>WORK STAGES<\/h2>\n<strong>Collaboration you can plan<\/strong>\n\nThe programme is staged so it is clear from the start what is happening now, what comes next and where responsibility sits.\n\n<strong>Stage 1. Diagnosis and risk map<\/strong>\n\nWe learn how the company operates, check the current compliance state and identify gaps and priorities.\n\n<strong>What the client gains:<\/strong> a clear picture of the situation and a plan for the annual programme, not a generic list of remarks.\n\n<strong>Stage 2. Ordering and implementation<\/strong>\n\nWe update documentation, organise registers and processes, assign roles and embed solutions in day-to-day operations.\n\n<strong>What the client gains:<\/strong> a foundation that works operationally, not only formally.\n\n<strong>Stage 3. Ongoing handling and operational support<\/strong>\n\nWe run day-to-day topics, support departments and the management board, handle new business initiatives and perform DPO duties.\n\n<strong>What the client gains:<\/strong> fast support in everyday decisions and less burden on the team.\n\n<strong>Stage 4. Reviews and keeping order<\/strong>\n\nWe regularly check selected areas and update documents and processes when something changes. We also run training when needed.\n\n<strong>What the client gains:<\/strong> order that holds even as the company changes.","icon":null,"order_within_specialization":0,"flexible_content":[{"acf_fc_layout":"hero","section_header":{"section_header":{"eyebrow":"","heading":"Audytujemy, porz\u0105dkujemy i prowadzimy obs\u0142ug\u0119 RODO przez ca\u0142y rok.","heading_highlight_mode":"split","heading_split":{"small_part_text":"We audit, we organise","strong_part_text":" We run GDPR support throughout the year.","":null,"small_part_size":"","strong_part_size":"","tag":"h2","style":"inherit","alignment":"inherit"},"description":"We start with an audit and put documents and processes in order. Then we take on day-to-day support: the DPO role, questions from departments, support for new projects, reviews and training.","":null,"heading_tag":"h1","heading_style":"hero","alignment":"left"}},"actions":{"button_cluster":{"intro":"","buttons":[{"button":{"link":{"title":"Book a brief call about the annual GDPR programme","url":"#contact","target":""},"variant":"primary","icon":"arrow","icon_size":"inherit","size":"default","aria_label":""}}],"alignment":"left"}},"media":{"media":{"image":"","mobile_image":"","object_position":"center","object_position_custom":""}},"section_meta":{"anchor_id":"","is_enabled":true},"variant":"split","mobile_body_card":false},{"acf_fc_layout":"person_cta","person":2654,"section_header":{"section_header":{"eyebrow":"","heading":"In many companies GDPR \u201cexists\u201d, but nobody actually runs it. Documents become outdated, accountability blurs, and the topic returns with every campaign, system rollout, HR change or reorganisation.","heading_highlight_mode":"none","heading_split":{"small_part_text":"","strong_part_text":"","":null,"small_part_size":"","strong_part_size":"","tag":"h2","style":"inherit","alignment":"inherit"},"description":"The biggest problem is not a single document. The problem starts when nobody manages GDPR on an ongoing basis.","":null,"heading_tag":"h2","heading_style":"compact","alignment":"left"}},"carousel_settings":{"carousel_settings":{"autoplay_mode":"default","autoplay_delay":6.5}},"actions":{"button_cluster":{"intro":"","buttons":null,"alignment":"left"}}},{"acf_fc_layout":"expandable_box","section_header":{"section_header":{"eyebrow":"CHALLENGES","heading":"The most common problems we solve","heading_highlight_mode":"none","heading_split":{"small_part_text":"","strong_part_text":"","":null,"small_part_size":"","strong_part_size":"","tag":"h2","style":"inherit","alignment":"inherit"},"description":"","":null,"heading_tag":"h2","heading_style":"section","alignment":"center"}},"items":[{"problem_title":"Documentation does not keep up with the company","teaser_description":"The documents were created at some point, but they no longer reflect how you operate today. It is hard to tell what is current and what needs fixing.","solution_title":"","solution_description":"<p>We start with a diagnosis and organise the documents so they match the company\u2019s processes, tools and responsibilities.<\/p>\n\n<p>Benefit for the company: it is easier to get through inspections, tenders and partner audits.<\/p>\n\n<p>Without action: an inspection, an incident or a new rollout will quickly expose the gaps.<\/p>","icon":"","accent":"pink","open":false},{"problem_title":"There is no owner of the topic","teaser_description":"HR, IT, marketing, sales and administration all work with data, but nobody joins it up: who decides, who carries out the work, who approves.","solution_title":"","solution_description":"<p>We take over running the area: we clarify roles, set rules for cross-department collaboration and keep topics under control on an ongoing basis.<\/p>\n\n<p>Benefit for the company: less chaos and faster decisions, without wrangling over \u201cwhose task this is\u201d.<\/p>\n\n<p>Without action: responsibility still sits with the management board - only without tools or support.<\/p>","icon":"","accent":"violet","open":false},{"problem_title":"New projects bring new questions about data","teaser_description":"Marketing campaigns, CRM, HR, cloud, outsourcing, reorganisation, new sales channels - the topic returns every time.","solution_title":"","solution_description":"<p>We support new projects and quickly answer which steps are needed to move forward without unnecessary risk.<\/p>\n\n<p>Benefit for the company: projects move ahead without standstills.<\/p>\n\n<p>Without action: every new initiative will come back with the same questions and rework.<\/p>","icon":"","accent":"blue","open":false},{"problem_title":"You act reactively instead of keeping lasting order","teaser_description":"GDPR appears only when there is an incident, a customer question, an employment dispute or time pressure.","solution_title":"","solution_description":"<p>We run regular reviews and updates to catch problems earlier, instead of acting reactively.<\/p>\n\n<p>Benefit for the company: fewer crises and less last-minute work.<\/p>\n\n<p>Without action: the cost of chaos grows with every emergency.<\/p>","icon":"","accent":"orange","open":false},{"problem_title":"The team does not know how to act","teaser_description":"Procedures exist, but day-to-day work is left with guesswork, shortcuts and uncertainty.","solution_title":"","solution_description":"<p>We train people on examples from your work and set simple rules in processes so everyone knows how to act in typical situations.<\/p>\n\n<p>Benefit for the company: fewer mistakes, fewer rush questions, greater independence.<\/p>\n\n<p>Without action: even good documentation will not work if nobody knows how to use it.<\/p>","icon":"","accent":"pink","open":false},{"problem_title":"Every topic starts from scratch","teaser_description":"With every new matter you go back to basics: who decides, what to check, which documents to prepare, whom to hand them to.","solution_title":"","solution_description":"<p>We define roles, organise registers and documents, and appoint one contact person for day-to-day matters.<\/p>\n\n<p>Benefit for the company: less wasted time and fewer last-minute topics.<\/p>\n\n<p>Without action: GDPR will keep slowing projects down and burdening key people.<\/p>","icon":"","accent":"violet","open":false}],"section_meta":{"anchor_id":"","is_enabled":true}},{"acf_fc_layout":"box_variants","variant":"process-detail","section_header":{"section_header":{"eyebrow":"OUR SOLUTION","heading":"how the GDPR Annual Program works","heading_highlight_mode":"none","heading_split":{"small_part_text":"","strong_part_text":"","":null,"small_part_size":"","strong_part_size":"","tag":"h2","style":"inherit","alignment":"inherit"},"description":"First we check what is already in order with you and what needs improvement. Then we organise documents and processes. Finally we handle ongoing GDPR matters as the company changes.","":null,"heading_tag":"h2","heading_style":"section","alignment":"center"}},"items":[{"title":"Current-state audit","description":"","body":"<ul>\n \t<li>review of documents, processes and responsibilities<\/li>\n \t<li>checking how data work looks across departments<\/li>\n \t<li>identifying gaps and agreeing what comes first<\/li>\n<\/ul>\n&nbsp;","tags":"A list of the most important gaps and a work plan for the start of the programme.","count":"","accent":"violet","icon":""},{"title":"Performing the DPO function","description":"","body":"<ul>\n \t<li>acting as Data Protection Officer<\/li>\n \t<li>handling DPO matters and documenting findings<\/li>\n \t<li>a contact point for departments and the management board on GDPR matters<\/li>\n<\/ul>\n&nbsp;","tags":"An external DPO and a clear day-to-day working model.","count":"","accent":"blue","icon":""},{"title":"GDPR documentation tailored to the company","description":"","body":"<ul>\n \t<li>preparing or updating policies, procedures, clauses and templates<\/li>\n \t<li>fitting documents to how the company actually operates<\/li>\n \t<li>embedding the rules in day-to-day work (so they are used)<\/li>\n<\/ul>\n&nbsp;","tags":"Up-to-date documents the company can actually use.","count":"","accent":"orange","icon":""},{"title":"Registers and processes put in order","description":"","body":"<ul>\n \t<li>organising registers and processing activities<\/li>\n \t<li>setting operating rules in key areas<\/li>\n \t<li>keeping registers and documents in order<\/li>\n<\/ul>\n&nbsp;","tags":"Consistent registers and a clear operating model in the main data-related processes.","count":"","accent":"orange","icon":""},{"title":"Ongoing support for departments","description":"","body":"<ul>\n \t<li>advice for departments and the management board<\/li>\n \t<li>handling everyday questions and organisational changes<\/li>\n \t<li>support for new projects, campaigns and system rollouts<\/li>\n<\/ul>\n&nbsp;","tags":"Faster answers and fewer blockers in projects.","count":"","accent":"pink","icon":""},{"title":"Regular reviews","description":"","body":"<ul>\n \t<li>reviews of selected areas<\/li>\n \t<li>checking what has changed and what needs fixing<\/li>\n \t<li>agreeing next steps<\/li>\n<\/ul>\n&nbsp;","tags":"Regular reviews instead of returning to the topic every few years.","count":"","accent":"violet","icon":""},{"title":"Training and team education","description":"","body":"<ul>\n \t<li>training for employees, managers and process owners<\/li>\n \t<li>translating rules into practical situations<\/li>\n \t<li>embedding an operating standard in the organisation<\/li>\n<\/ul>\n&nbsp;","tags":"A team that better understands its duties and makes fewer mistakes in practice.","count":"","accent":"blue","icon":""}],"footer_heading":"","footer_tags":"","actions":{"button_cluster":{"intro":"","buttons":null,"alignment":"left"}},"section_meta":{"anchor_id":"","is_enabled":true}},{"acf_fc_layout":"box_variants","variant":"box-point","section_header":{"section_header":{"eyebrow":"WHO THIS SERVICE IS FOR","heading":"for companies that want GDPR in order without building the whole function in-house","heading_highlight_mode":"none","heading_split":{"small_part_text":"","strong_part_text":"","":null,"small_part_size":"","strong_part_size":"","tag":"h2","style":"inherit","alignment":"inherit"},"description":"The GDPR Annual Program is for companies that want orderly data protection and ongoing support, without adding the topic to the team\u2019s workload.","":null,"heading_tag":"h2","heading_style":"section","alignment":"center"}},"items":[{"title":"The company is growing marketing, launching new campaigns and rolling out further tools. ","description":"It needs support that will not stop a project with \u201cit cannot be done\u201d, but will quickly show how to proceed in line with GDPR and move on.\n\n","body":"<p>The Annual GDPR Programme is for companies that want organised data protection and ongoing support without adding this topic to the team\u2019s workload.<\/p>","tags":"","count":"","accent":"orange","icon":""},{"title":"The company is growing and putting its operating model in order. ","description":"It wants to clarify roles, processes, registers and responsibilities, and embed the DPO function in day-to-day work.","body":"<p>The company is developing its marketing, launching new campaigns and introducing additional tools. It needs support that will not stop a project with \u201cthat cannot be done\u201d, but will quickly show how to do it in compliance with the GDPR and move forward.<\/p>\n\n<p>Why it matters: the company gets timely decisions and support for new initiatives, with less risk that growth will create a problem for the future.<\/p>","tags":"","count":"","accent":"orange","icon":""},{"title":"The person responsible for administration, HR or formal matters already has too many scattered topics. ","description":"They need someone who will take over running GDPR, provide a clear plan and will not require the company to keep \u201cpulling\u201d the topic.","body":"<p>The company is growing and organising the way it operates. It wants to put roles, processes, registers and responsibilities in order, and integrate the data protection officer (DPO) function into day-to-day work.<\/p>\n\n<p>Why it matters: the company has ongoing support and fewer issues resurfacing every few months.<\/p>","tags":"","count":"","accent":"orange","icon":""}],"footer_heading":"","footer_tags":"","actions":{"button_cluster":{"intro":"","buttons":null,"alignment":"left"}},"section_meta":{"anchor_id":"","is_enabled":true}},{"acf_fc_layout":"cooperation_process","section_header":{"section_header":{"eyebrow":"WORK STAGES","heading":"collaboration you can plan","heading_highlight_mode":"none","heading_split":{"small_part_text":"","strong_part_text":"","":null,"small_part_size":"","strong_part_size":"","tag":"h2","style":"inherit","alignment":"inherit"},"description":"The programme is staged so it is clear from the start what is happening now, what comes next and where responsibility sits.","":null,"heading_tag":"h2","heading_style":"section","alignment":"center"}},"steps":[{"title":"Assess and map risks","description":"We learn how the company operates, assess its current compliance position and identify gaps and priorities.","accent":"pink"},{"title":"Organize and implement","description":"We update documentation, organize registers and processes, assign roles and put solutions into day-to-day practice.","accent":"pink"},{"title":"Ongoing support and operational guidance","description":"We manage ongoing matters, support teams and the board, advise on new business initiatives and carry out DPO responsibilities.","accent":"pink"},{"title":"Review and maintain","description":"We periodically review selected areas and update documents and processes as circumstances change. We also provide training when needed.","accent":"pink"}],"cta_text":"Schedule a brief call about the annual GDPR program.","actions":{"button_cluster":{"intro":"","buttons":[{"button":{"link":null,"variant":"primary","icon":"arrow","icon_size":"inherit","size":"default","aria_label":""}}],"alignment":"left"}},"section_meta":{"anchor_id":"","is_enabled":true}},{"acf_fc_layout":"contact","section_header":{"section_header":{"eyebrow":"Contact us","heading":"Hand GDPR support to us and take it off the team","heading_highlight_mode":"none","heading_split":{"small_part_text":"","strong_part_text":"","":null,"small_part_size":"","strong_part_size":"","tag":"h2","style":"inherit","alignment":"inherit"},"description":"In 30 minutes we will gather the basics and agree where to start: what needs ordering at the outset and what ongoing support looks like in the months ahead.","":null,"heading_tag":"h2","heading_style":"section","alignment":"center"}},"person":null,"person_eyebrow":"","person_body":"They will follow up with any questions or recommend a next step.","response_title":"Quick response","response_body":"We usually respond within two hours on business days.","form":{"cf7_form":null,"name_label":"","name_placeholder":"","phone_label":"","phone_placeholder":"","email_label":"","email_placeholder":"","message_label":"","message_placeholder":"","privacy_text":"","newsletter_text":"","button_label":""},"background":null,"section_meta":{"anchor_id":"","is_enabled":true}}]},"_links":{"self":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/service\/2782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/service"}],"about":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/types\/service"}],"version-history":[{"count":0,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/service\/2782\/revisions"}],"wp:attachment":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/media?parent=2782"}],"wp:term":[{"taxonomy":"specialization","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/specialization?post=2782"},{"taxonomy":"practice_area","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/practice_area?post=2782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}