Data Privacy

Test the maturity of your privacy practices and receive prioritised recommendations for the next best actions. 

This service is especially valuable for: Data Protection Officers (DPOs) aiming to showcase their impact, organisations seeking a comprehensive assessment to guide budget setting and annual planning and businesses needing to demonstrate their data protection posture.

These include Accountability Frameworks and DSP Toolkits.

Create a customised privacy framework tailored to your organisation’s needs.

We can collaborate with you to develop and implement a new, coordinated, and integrated privacy framework or ensure your existing framework continues to meet your requirements. Additionally, we can help you enhance your privacy framework to comply with the updated ISO 29001:2024 standard. This service is particularly beneficial for organizations needing to demonstrate the robustness and appropriateness of their privacy approach.

Leverage our data privacy expertise for your strategic projects. 

We offer guidance on design requirements and decisions, comprehensive documentation including policies, procedures, and risk assessments, and Board-level assurance. This service is especially valuable for programs with significant personal data processing components where data privacy compliance is a strategic priority.

Development and administration of data privacy codes and the data privacy sections of industry codes. 

This service is particularly useful for industry bodies and trade associations seeking additional income streams by assisting members in demonstrating compliance in complex areas of data privacy.

Bespoke research on data privacy topics. 

We can define and deliver research projects on topics of interest to you. From focus groups to test privacy wording or training effectiveness, to strategic reports on issues of interest such as AI, our team can work with you to discover what matters to your data subjects. Of particular interest to larger organisations with strategic challenges to address, trade associations looking for insights and innovators wanting to know how privacy issues will affect adoption.

Fully outsourced Data Protection Officer (DPO) services aligned with GDPR.

We handle all DPO responsibilities, including helping your organisation understand and meet its obligations, reviewing the effectiveness of Data Protection Impact Assessments (DPIAs), and producing regular management reports to support accountability. This service is particularly beneficial for organisations that are legally required to have a DPO but are not ready to commit to a full-time, in-house role.

Flexible support for in-house data protection officers delivered via a bank of call-off days. 

We can provide ad hoc overflow resource when workloads exceed available capacity and specialist expertise to assist with complex issues when they arise. We can also provide external assurance of the effectiveness of inhouse teams and validate advice and guidance. Particularly useful for organisations with in-house teams that need extra support from time to time, but also offered in combination with our Outsourced Data Protection Officer service.

Training, assurance and strategic support for marketers. 

We can provide data protection training to marketing teams, assure marketing programmes, assist organisations with ePrivacy compliance issues such as collecting and managing marketing permissions, and help design compliant marketing strategies to improve marketing effectiveness. Particularly useful for marketing-driven organisations with legacy data and compliance issues.

Assurance of website and app compliance including privacy notices, consent statements and cookie banners. 

Particularly useful for any organisation that wants to be sure its digital ‘shop window’ is compliant and demonstrates a privacy culture.

General, role-based and decision-maker training. 

We can provide induction and refresher data protection training including elearning and face-to-face training. General training provides a common grounds for everyone, role-based training ensures individuals understand how to control the risks they are responsible for and decision-maker training is designed to help senior managers ensure they are properly considering data protection when making decisions. Staff awareness campaigns help to raise awareness of common and emerging issues. We can also provide bespoke training on data protection issues related to emerging trends such as AI. Useful for all organisations.