Compliance

Spain, in line with the growing concern over money laundering and terrorist financing for the financial system and citizen security, has strengthened the existing rules and regulations in recent years, increasing the number of activities and professions subject to these obligations.
At UHY Fay & Co, our team of experts supports obliged entities in the implementation of effective mechanisms and procedures tailored to their activities, facilitating the identification of the ultimate beneficial owner, understanding the purpose of the business relationship, and verifying the origin of the client’s funds, promoting the establishment of a solid and effective internal control system.

What are the benefits of an Anti-Money Laundering system?

• Promotes an ethical culture aligned with the organization’s values.
• Enhances the management and control of procedures, improving efficiency and coordination among the organization’s departments.
• Protects the company’s reputation and helps avoid sanctions.

In an increasingly complex and regulated business environment, where trust has become the most valuable asset for any organization, having a robust Compliance system is not just an option, it is an obligation.
With over 40 years of experience advising companies across all sectors, UHY Fay & Co is prepared to help you comply with regulations, minimize risks, and ensure the integrity of your organization.
Our team of experts provides comprehensive advice on the implementation and monitoring of Compliance systems, tailored to your company’s specific needs through a personalized approach. We support you at every stage, from preventing legal risks to reinforcing corporate ethics, so you can focus on what you do best: growing and achieving your goals.

What are the benefits of a Compliance system?

• Promotes an ethical culture aligned with the organization’s values.
• Enhances the management and control of procedures, improving efficiency and coordination among the organization’s departments.
• Becomes a key element for attracting external investment.
• Reduces the risk of legal violations within the organization.
• Facilitates the exemption or mitigation of the legal entity’s criminal liability.

What services do we offer?

• Design and implementation of the Criminal Compliance system.
• Review and update of already designed Compliance systems.
• Adaptation of the Model to ISO 37301 and/or ISO 37001.
• Reports on the current status and analysis of criminal risks.
• Creation of criminal risk maps.
• Design and/or implementation of protocols, policies, and controls.
• Specific Compliance reports upon client request.
• Ongoing advice and support to the Compliance Officer or Compliance Unit.
• Expert advice to the compliance bodies.
• In-person, hybrid, and online training in criminal compliance for governing bodies, executives, employees, collaborators, etc.
• Design of training materials, evaluation tests, and certificates of completion.
• Custom-designed training on specific topics.

The purpose of data protection is to guarantee and protect public freedoms and fundamental rights of individuals and, in particular, their honor and personal and family integrity. It gives citizens the power to control, dispose and decide on their personal data.

The entry into force, in May 2016, of the REGULATION (EU) 2016/679, RGPD, in application since 2018, added to the approval of the new Spanish Law regarding the protection of personal data (LOPDGDD), the already existing Law on the Information Society and Electronic Commerce (LSSI) and the European project to harmonize the regulations regarding the use of cookies, has made the protection of personal data more complex and demanding.

We have a specialized team with years of experience, dedicated to helping companies comply with the different regulations regarding the protection of personal data:

• Data protection audits.
• External DPO services.
• Advice to the internal DPO of the organization.
• Preparation of the Records of processing activities as data controller and if necessary, also as data processor.
• Analysis of the entity’s risks and issuance of a report on the matter.
• Drafting of informative clauses and determination of how to obtain the consent of the users (clients, employees, associates, owners…).
• Drafting of Processor contracts.
• Drafting of legal texts for e-mails footers and Web pages (Privacy Policy, Legal Notice and Cookies Policy).
• Training
  • Face-to-face, hybrid and online DP training.
  • Training materials, tests and knowledgement certificates.
  • Training on specific subjects.