Every new product and service must be checked against the GDPR on the processing of Personal Data. This check, or DPIA light, should bring to light what Personal Data is used for what, for how long, by whom, where, and what will happen when the consent ends or is revoked.
For advice and management services Shared responsibility applies. This means that nothing extra needs to be arranged to do business. The client’s agreement with PNO (In Dutch Overeenkomst van Opdracht or OvO) together with the General Terms & Conditions in combination with the Privacy Statement covers it all. For most financing mechanisms PNO NL works with like WBSO, MIT, etc. a DPIA light is available.
Still, some clients want PNO to sign a Processing Agreement, for which a standard is available.
PNO offering SaaS service to clients is under construction