Experts in Data Privacy

We conduct gap analysis and / or maturity assessments against a range of Data Privacy  laws, standards and frameworks such as the General Data Protection Regulation (GDPR), the ICO's Accountability Framework, the NIST Privacy Framework and ISO 27701. We can also support any certifications efforts your organisation may undertake.

We work with our clients to develop comprehensive Data Privacy strategies that align with business goals and objectives. Our team of experts will assess your current data privacy maturity, help you to understand your target maturity state, and work with you to build a strategic roadmap to bridge the gap.

Many global data privacy laws require organisations to understand and manage the risks of processing personal data. We can help you develop well-integrated processes for conducting Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs) and International Data Transfer Assessment (IDTAs) as well as conducting them for you. 

Ensuring your users or customers are aware of how you process their personal data is a key principle the world over. We can help you craft easy to legally compliant privacy notices that are easy to understand for your customers. We can also work with you to go go beyond the minimum by developing more advanced communications plans.   

The first step on the journey to an effective Data Privacy programme is knowing what personal data an organisation processes and why. We can help you to discover and inventorise the personal information your organisation processes.  

Many laws provide customers with specific rights such as the rights of access and erasure and require organisations to comply with requests within short timescales. This can be challenging but we can help you to develop processes and training to ensure that your organisation is well-prepared for data subject rights requests.  

No matter what controls organisations put in place, there will always be a risk of personal data breaches. We can help you to develop processes and training to ensure that your organisation can effectively handle personal data breaches if they do happen. 

Even with the best policies & procedures, organisations will struggle to get the most out of their data privacy programmes if employees lack awareness and training. We can help you develop comprehensive training and communications programmes for your organisation to ensure your employees understand their data privacy roles & responsibilities.   

Information security is a key pillar of many  data protection laws around the world. We can help you develop well-integrated processes for conducting information security risk assessments as well as conducting them for you. We also have extensive experience in supporting clients through certifications including ISO 27001, Cyber Essentials and the UK NCSC Cyber Assessment Framework (CAF).