We can offer the below services either in-person or remotely, to best suit our clients needs
We can offer outsourced Data Protection Officer ("DPO") services to help meet DPO requirements under the UK GDPR. If you don't require a DPO but would still like to have a DPO or other form of data protection contact (e.g. outsourced Data Protection Manager/Specialist) please let us know and we can discuss requirements further.
We are able to review, help and advise with best practices with data security compliance requirements. We have also partnered up with another organisation called Switch Direction (see our "partners" page") and together we can offer a joint ISO 27001 and data protection advisory services.
If you are an organisation and offering goods/services or monitoring behaviour of those within the UK and do not have a presence within the UK, we can offer UK GDPR Representation. We will help complete necessary documentation and ensure our contact details are available where needed.
We understand there may be times where an organisation does not need a DPO either fulltime/part time but rather needs occasional help and support as and when required (i.e. a reactive service). We are able to help with this requirement and can discuss this service further to determine how it can help best serve organisations and their needs.
We can carry out data protection audits to help determine how your organisation is doing in line with data protection requirements, and produce a report and recommendations. These audits can be done onsite or remotely to help ease and minimise any disruptions. With these audits we can also interview key members of staff and assess how they are doing with data protection requirements and advise them further as well to give them further reassurances. We can also help complete recommendations (where possible) and provide additional guidance as well.
We are able to help review, amend and draft policies, notices and other documentation (e.g. Records of Processing Activities) as required. This also includes reviews of assessment templates such as Data Protection Impact Assessments ("DPIAs"). We are also able to provide templates of policies, notices and documentation where needed.
We can review your website and apps and provide a written report detailing our findings and recommendations in line with the UK/EU GDPR and cookie requirements/PECR. As part of this service we can also draft a privacy notice/policy for websites which can also be used for any apps.
We are able to offer GDPR training/data protection awareness training and help customise content towards client/sector/industry specific needs/requirements. We are also able to create attendance list/certificates to demonstrate evidence of training. We can also help with annual training sessions as well.
We are able to help, support, advise and carry out requests from individuals who are exercising their rights under data protection law. We can help with applicable requests such as Data Subject Access Requests ("DSARs"), advising when an erasure/deletion request is exercisable and advise on other right requests.
If there is something not included and you would like to discuss further, please feel free to contact us via the "Contact Form" on the Home Page.