The General Data Protection Regulation sets principles for lawful, fair and transparent processing, grants individuals rights over their data, and requires organisations to demonstrate accountability.
We deliver data mapping and records of processing, lawful basis analysis, privacy notices, rights-handling procedures, DPIAs, processor agreements, transfer assessments and breach response playbooks, and can certify the resulting programme through ISO/IEC 27701.
Who it is for
- Companies with EU customers, users or employees
- Processors serving EU-based clients
- Organisations transferring personal data out of the EU
What you gain
- Reduced regulatory and contractual risk
- Accountability evidence for regulators and customers
- A privacy programme reusable for other laws
How we get you compliant
Applicability and scoping
Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
Data and process mapping
Build a record of processing or control inventory so obligations can be tied to real systems and owners.
Gap assessment
Measure current practice against each obligation and rank the gaps by legal and business risk.
Remediation roadmap
Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
Evidence and ongoing monitoring
A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.