Strategy & Ambition
Legal & Compliance
IT Infrastructure X-Ray
Risk & Opportunities
Improvements
Policies & Procedures
Measures & Controls
Operations
Leadership & Management
Compliance
Progress Overview
Audit View
Logging and Monitoring Information
External Audit ISO 27001
MS365 Integration Supporting Documentation
Global Impact

The ‘Global Impact Section’ consolidates critical legal and regulatory requirements from various countries, ensuring your organization remains informed and compliant during international expansion. By integrating up-to-date local legal research, this section enables effective risk management and supports informed decision-making, helping you understand the risks and challenges of expanding into other jurisdictions.
Expanding your business into new jurisdictions requires careful attention to additional requirements imposed by both your customers and local laws. As you navigate these challenges, it is essential to thoroughly review contractual agreements and understand the regulatory environment of each market. The following points outline key tips to help you manage this process effectively and ensure compliance in your new operational territories:
- Carefully examine all contracts such as Master Service Agreements and other commercial contracts to understand the specific legal and regulatory requirements of the jurisdiction where your services or products will be deployed.
- Ask for clarification on any complex or unclear points, as companies may incorporate internal standards that could lead to unexpected obligations after signing.
- Identify extra stipulations related to security, privacy, quality, and insurance standards. Determine if you are required to adopt new standards or obtain certifications and consider the associated costs.
- Learn how the customer manages security, quality, privacy assurance and prepare for any potential external audits.
- Investigate privacy and security regulations, particularly for operations outside the GDPR geographic area, using resources such DLA PIPER for data protection laws and Global Partner Digital for encryption laws and policies.
- Record any additional requirements on a per-country or per-customer basis, and detail the actions taken such as policy reviews or the implementation of extra security and privacy controls to ensure ongoing compliance and mitigate risk.
- If needed, consult with local legal counsel or compliance experts who can provide insights into the regional regulatory landscape and help tailor your approach.
- Regularly update your understanding of local laws and customer requirements and adjust your compliance strategy to keep pace with evolving regulations.
- Participate in industry forums or networks to share insights and best practices, ensuring that your compliance strategies remain current and effective.
| Field | Value / Description | Example |
| Country | free text field | Romania |
| Additional Compliance Requirements | free text field | In addition to the requirements provided by the GDPR in Articles 37 to 39, Law no. 190/2018 provides that a data protection officer (DPO) must be designated whenever the entity acting as controller is processing a national identification number, including by collecting or disclosing any documents enclosing such national identification number, when the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, in accordance with the provisions of Article 6 paragraph 1 letter (f) of the GDPR. |
| Operational Impact | free text field | we will need our own DPA |
