Tuesday, 12 June 2018 11:38

Implementation of GDPR in the social sector

Written by
Rate this item
(0 votes)

In mid-2017 the Associação de Beneficiência Popular de Gouveia (ABPG) began to prepare the organization in order to adapt its structure to the new requirements of the General Data Protection Regulation (GDPR) regarding personal data collection, processing and maintenance. This Private Institution of Social Solidarity (IPSS in Portuguese) selected Leadership Business Consulting (LBC) due to our vast knowledge of its business, organization, processes and people, which results from a long-term partnership that began in 2006, and due to LBC’s expertise in digital transformation, including a broad domain of GDPR.

A whole new paradigm in the personal data

The GDPR, in force since May 25, 2018, corresponds to one of the biggest changes in the processing of personal data, applied to any institution that deals with data, and that is based and/or does business in the European Union. In fact, this regulation prevails over national laws, with great impact on all departments of the organizations. The ABPG has management practices as if it were a company (except in the marketing and commercial aspects). With six areas of intervention, 220 fixed staff and several subcontractors, the Association has over 3,500 service users/clients (in areas ranging from health to culture, sports and leisure, with valences such as children’s day care centres, nursing homes, continued care units, etc.).

The work carried out by Leadership Business Consulting involved three stages:
-  A first evaluation phase (with the identification of the data and respective processing performed by ABPG, the analysis of gaps considering GDPR requirements, employees training);
- A second step that included the design of an action plan (identification and planning of actions to ensure compliance); 
- A third phase of support in the GDPR implementation.. 

Raise the level of exigence

The main results intended – and obtained – by the Associação de Beneficiência Popular de Gouveia with the project carried out by Leadership Business Consulting included:
- The commitment of the institution concerning the privacy of personal data, both of the users of its services and of the employees; 
- A better provision of customer services in the scope of data protection (exercise of rights); 
- Clarification of the rules to be followed by employees (mobile phones, computer applications, confidentiality, etc.); 
- The definition of a privacy policy and the processing of personal data: a better understanding of the type of personal data collected; the purposes of data processing; how long they can be kept; measures to be taken to ensure their safety.
- Definition of a strict policy in terms of communication of data to third parties. 

Jorge Cravo, a partner at Leadership Business Consulting, declares that “this was a project that gave us special pleasure due to the emotional connection that exists with ABPG and its people, as well as for leading us to learn and create solutions that did not exist in the market, since complying with GDPR corresponds to a new paradigm of exigency in personal data protection”.

João Pinto, vice chairman of ABPG, adds that the work “developed in partnership with Leadersip Business Consulting allowed not only to follow and fulfil new obligations regarding personal data protection, but also to take the opportunity to raise the level of exigency in the service provided to the people that we daily seek to assist.”

Related articles


Diferenciação pela qualidade do serviço prestado – O caso da ABPG

Num contexto de massificação das certificações, sobretudo na área da qualidade, será que ainda é possível uma organização diferenciar-se por ter um sistema de gestão da qualidade certificado? Poderão estes sistemas ser um efetivo instrumento de gestão e um apoio ao processo de tomada de decisão e estar interiorizado e aplicado no dia a dia de uma organização? 


A sua organização está preparada para a Indústria 4.0?

Empresas de todos os setores no globo estão a adotar a Indústria 4.0. Já não se trata de “temos tempo, é uma tendência de futuro” – a também denominada Quarta Revolução Industrial está aí. É uma realidade. A sua organização está preparada?


Gestão da mudança: 3 regras para líderes

A maior parte dos insucessos nos processos de mudança acontece porque não existe um foco partilhado definido logo no início.
Read 1203 times Last modified on Tuesday, 12 June 2018 18:25
More in this category: « Beira Interior Strategy 2010