GDPR Readiness Assessment
We start by evaluating your current data handling practices. This includes identifying what personal data you collect, how it is stored, processed, and shared, and assessing the security measures in place. This audit helps identify gaps in your compliance and allows us to create a tailored plan to address potential issues.
Data Protection Impact Assessment (DPIA)
Our team conducts DPIAs for projects that involve high-risk processing of personal data. DPIAs help to identify and minimise privacy risks, ensuring that your business processes are transparent and compliant with GDPR’s accountability principle. This includes evaluating the purpose of data collection, the legal basis for processing, and the risk to individuals’ privacy.
Policy Development & Documentation
We assist in creating essential GDPR documentation, including:
- Data Processing Agreements (DPA) with third-party vendors to ensure they are compliant.
- Privacy Notices that are clear, transparent, and accessible to your customers, outlining what data is collected, how it will be used, and your customer’s rights.
- Data Retention Policy to ensure you don’t hold personal data longer than necessary and that it is securely disposed of when no longer needed.
Data Subject Rights Management
We help you establish processes for handling individuals’ rights under the GDPR, including the right to access, rectify, erase, restrict processing, and data portability. Our service ensures you are able to respond to data subject requests in a timely manner within the one-month window specified by GDPR.
Security & Risk Management
We advise on the implementation of robust security measures to protect personal data from breaches, ensuring encryption, access controls, and secure storage practices. We also assist in creating an incident response plan to handle potential data breaches, ensuring that GDPR’s 72-hour breach notification rule is met.
Employee Training
We offer training programs for your staff to ensure they understand GDPR principles, recognise potential risks, and know how to handle personal data appropriately. Regular training helps foster a culture of privacy within your business.
Ongoing Monitoring & Support
GDPR compliance is an ongoing process. We provide ongoing monitoring services to ensure your data protection practices remain up to date with any changes to the regulation. We also offer periodic audits and refreshers to ensure that your compliance framework continues to meet the required standards.