We were contacted by an EU-based pharmaceutical company with several subsidiaries in the Balkans region.
For HR purposes, the holding company and its subsidiaries share employee personal data. Besides this, the group shares sensitive personal data including information from medical trials.
The client wanted to be sure these data transfers were compliant with local regulation, as well as with the GDPR.
All existing data transfers between companies were assessed. The client was provided with Art. 28 Data Sharing Agreement which was signed by all companies involved in cross-border transfers of personal data.