Corporate Vision November 2017

10 CORPORATE VISION / November 2017 , MGSI S.àr.l. specialises in data protection. It offers advice on all aspects of data protection, covering technological and organisational measures as well as legal aspects – the latter is made possible bymeans of their lawfirmpartner as an intermediary. We invitedMGSI’s CEO and Founder, Mélanie Gagnon to tell us more about the innovative data protection company. Think Data Protection MGSI S.àr.l. specialises in data protection. Offering advice on all aspects of data protection, they cover technological and organisational measures as well as legal aspects – the latter is made possible by means of their law firm partner as an intermediary. As for any business within their specific sector, it is inevitable that the company will run into challenges at some point in their career. Within the wider industry that MGSI operates in, Mélanie highlights some of the challenges that they are currently facing, such as with the GDPR. “The GDPR has brought along a change in the mindset within the data protection culture. People are becoming more and more alert regarding personal data, that they are beginning to communicate to companies or online. The consequence of this, is that companies processing personal data will have to change the way they have been dealing with personal data until now. Companies and organisations will have to reinforce their internal data protection culture by setting up the appropriate privacy policies and procedures, if they do not want to pay the high fines stipulated in the GDPR. “There will be increasing and ongoing work in the field of data protection, as this new aspect will have to be integrated in the DNA of companies and organisations. “The greatest challenge will be to raise the awareness of each employee so that data protection is no longer considered as the problem of the legal or IT department, but as a general issue of the company for which every employee feels concerned and responsible.” MGSI advises on matters relating to the EU General Data Protection Regulation (GDPR), and provides several services: initial gap analysis to determine the appropriate measures and controls that need to be implemented to ensure compliance with the GDPR; the services of an external Data Protection Officer (DPO); and information security risk analysis and assessment. Furthermore, MGSI offers Data Protection Impact Assessments for data processing operations that may pose a high risk to the rights and freedoms of individuals; assistance with governance, including the implementation of a data protection programme within an organisation; and Privacy by Design framework implementation. Another area of support is advanced training in personal data protection and information security awareness. Mélanie Gagnon, CEO and Founder, is from Quebec City, Canada and moved in February 2015 to set up the firm in Luxembourg. With the imminent arrival of the new GDPR, it was the perfect time to move abroad in this field. Kicking off this interview, Mélanie begins by telling us what sets MGSI apart from their competitors within the industry, marking them out as the best option for potential clients. “MGSI is the one of the few companies in Luxembourg which is 100% specialised in data protection. Unlike other companies offering services in this field, our company focuses only on data protection, in order to meet the specific needs of our clients. Furthermore, in May 2017, MGSI cofounded the first data protection salon in Luxembourg, which attracted over 200 participants. The second edition of the “Luxembourg Data Protection Days – GDPR is now” will be held on the 29th and 30th May 2018. Continuing the theme of success, MGSI is proud to work with the largest employer in Luxembourg, the Ministries of Luxembourg, along with other well-known international firms in Luxembourg offering financial, telecommunication and aviation services. The demand for work in this field is very high, which is due to the approaching deadline regarding the entry into force of the GDPR. Going into detail about the success MGSI has 1710CV07 accumulated over the years, Mélanie reveals more about what the company has to offer, as well as praising the driving force behind the unstoppable firm. “MGSI offers training in data protection. At the end of October and November, MGSI will conduct its first training sessions tailored for the Small and Medium Enterprises of Luxembourg in order to meet their specific needs. Moreover, MGSI has been recently accredited as an Official Training Partner of the IAPP and, this autumn, will host training for CIPP/E and CIPM certifications as of December 2017. “The team here at MGSI is composed of experienced consultants having either a legal, IT or information security background. Each consultant is specialised in a different domain of data protection and security which constitute the main assets of the company. The team has a thorough knowledge of the best practices as well as the different issues that arise in the protection of personal data. The members of the expert team hold different certifications which are recognised internationally in the data protection industry. Among others, they are CIPP/E, CIPM, CRISC, CISA, ISO 27001 Lead Implementer, PMP and are accredited” Chargé de la protection des données” by the CNPD.”