SMEs and growing businesses
Structured governance, risk and compliance support without a large internal specialist team.
Services
Data Protection & Privacy
We help organisations meet their obligations under UK GDPR and the Data Protection Act 2018, and build privacy practices that people can follow in their daily work.
What this covers
- Data mapping and records of processing
- Lawful basis and privacy notice review
- Data protection impact assessments
- Procedures for individual rights requests
- Data sharing and processor arrangements
- Personal data breach response and notification
- Assessment of international data transfers
- Awareness material for staff
How we work on this
The same five steps apply to every service, applied here to this work.
Assess
Establish what personal data you hold, where it flows and why.
Identify
Identify where practice differs from the law and from your own notices.
Design
Design records, notices, procedures and assessments that fit your operations.
Implement
Support rollout to the teams that handle the data.
Monitor & Improve
Review changes in processing and keep records and notices current.
Who it's for
Professional services organisations
Protection for confidential information under growing regulatory obligation.
Related services
Governance, Risk & Compliance (GRC)
Governance frameworks, risk management and compliance programmes.
AI Governance & Responsible AI
Governance over how AI is selected, implemented, used and monitored.
Cybersecurity Governance & Vulnerability Management
Cybersecurity governance and vulnerability management programmes.
View this service: Cybersecurity Governance & Vulnerability Management
Discuss your data protection requirements
Tell us what you are working towards and we will advise on where to start.