Kada Legal Operations
Digital compliance
Your data travels everywhere. We make sure you stay in control of it, and that you can prove it.
What is at stake
The benchmarks set by the regulation
4%
of worldwide annual turnover, or 20 million euros if higher: the ceiling for fines the CNIL can impose.
Source: GDPR, Article 83(5)
72 hours
to notify the CNIL of a personal data breach that presents a risk, from the moment you become aware of it.
Source: GDPR, Article 33
1 month
to answer a person who asks for access to their data, extendable by two months for complex requests.
Source: GDPR, Article 12(3)
Explore the method
Identify. Govern. Demonstrate.
Three complementary perspectives on a compliance approach. These reference points provide neither an assessment nor a compliance guarantee.
- Inventory data categories, data subjects and purposes.
- Locate processing operations, recipients, providers and cross-border flows.
- Document missing information before characterising risks.
What we do
Compliance kept up to date, not a forgotten binder
Record of processing
We map your processing activities and keep your record current, ready to be shown.
Impact assessments
For high-risk processing, we carry out the impact assessment and document the measures taken.
Processor contracts
We review and negotiate data protection clauses with your service providers.
Data breaches
When an incident occurs, we assess the risk, prepare the notification and coordinate the response.
Individual requests
Access, erasure, objection: we answer on time and keep a record of every reply.
Team awareness
Short sessions tailored to each role, so the right reflexes become second nature.
Understand the relationships
Connect data with responsibilities.
Explore each dimension and its implications for the others. Roles and obligations depend on the facts and applicable framework.
- Identify information that can identify a person.
- Describe its categories, origin and data subjects.
- Check whether special categories call for additional examination.
Assess your exposure
Where you stand, in five minutes
Thirty-five questions and a free PDF report: a first reading of your exposure, before you talk to us.
This assessment estimates a level of risk exposure, for guidance only, and does not constitute an audit or a compliance certification.
ASSESSMENT OF YOUR NON-COMPLIANCE RISK EXPOSURE
Free PDF report. About five minutes.
35 questions to estimate your organisation’s exposure to digital non-compliance risk and receive an assessment report.
This assessment estimates a level of risk exposure, for guidance only, and does not constitute an audit or a compliance certification.
Your external DPO
A data protection officer, without hiring one
Explore the steps in our DPO process. The service will be available soon.
DIGITAL COMPLIANCE · DPO
A clear path to appointing a DPO
Explore the steps and look up your organisation. This search does not create or send a request.
Public company data is used for this preview only.
Identify the organisation
Search by SIREN or company name, then review the official information.
Prepare the request
Provide the representative details needed to verify their authority.
Validate the mandate
The mandate and professional contact details will be shown after Kada’s legal review.
Complete the formalities
After review and acceptance, the Kada team will handle the CNIL formalities and send the official records.
Digital Compliance · technical review
Cookie scanner
Prepare a review of trackers observable before any interaction with the consent banner.
No isolated browser service with controls against requests to internal networks is configured. To protect submitted websites and our infrastructure, this page will not launch a scan.
This field only checks the address format in your browser. No request is sent to the website entered.
A cookie observed before consent is not automatically unlawful. Detecting no tracker does not prove compliance.
Requirements before activation
Activation requires an isolated browser with network filtering at every DNS resolution, redirect and subrequest, along with execution limits and abuse protection.
The validation performed here is syntax-only. It does not resolve DNS, fetch the URL, inspect cookies, or constitute an analysis.
No URL is sent to a server.
Frequently asked questions
Who must appoint a DPO?
Public authorities and bodies, and organisations whose core activities involve regular and systematic monitoring of individuals on a large scale, or large-scale processing of sensitive data (GDPR, Article 37). Others may appoint one voluntarily.
What does a DPO do?
They inform and advise management and staff, monitor GDPR compliance, advise on impact assessments and act as the contact point for the CNIL (Article 39).
Is an external DPO truly independent?
Yes. They receive no instructions on how to carry out their tasks, cannot be penalised for performing them and report to the highest level of management (Article 38). An outside firm brings that distance naturally.
How much does it cost?
It depends on the number of processing activities, the sensitivity of the data and the presence you need. We send you a fee proposal after a first conversation, with no commitment on your part.
Does the DPO have to be declared to the CNIL?
Yes. The organisation communicates its DPO's contact details to the CNIL and publishes them (Article 37(7)). With your mandate, Kada checks the request and carries out the formalities. Designation is official only after registration with the authority.