Implementation of the EU GDPR

Answer:

One of the quick wins would obviously be having the comfort that if under investigation from a Supervisory Authority you would have the means to prove accountability as set forth in the EU GDPR. Also, compliance with the EU GDPR would also prove to your customer and business partners your commitment for doing your business in a compliant way, not to mention that if your business is actually to provide services to other companies and in that sense processing personal data on their behalf (you acting as a processor) you would be expected by the companies (acting as controllers) to be EU GDPR compliant.

The decision to use internal or external resources is entirely up to you, so you can go both ways. However, this matrix that we have developed https://advisera.com/eugdpracademy/comparison/ might help you take th e right decision.

The time frame highly depends on the complexity of your business and your processing activities. Usually for SMEs is anywhere between 3 to 6 months. Also please consider that once established the EU GDPR framework needs to be maintained, so it is not just a one time job.