Practical GDPR Compliance

GLOBAL RISK ASSESSMENT

MANAGE RISK

Conduct a full risk assessment on the processing of personal data within your organisation, forming a baseline view of all data processing activities and the identification of high, medium and low data protection and GDPR compliance risks.

A key output from the assessment is a ‘findings and recommendations’ report with proposed next steps. This particular assessment is at the organisational level, we can also conduct the required Data Protection Impact Assessment (DPIA) at the project level as required (new mobile application or new technology platform as an example).

TRAINING & AWARENESS

IN PLAIN ENGLISH

Formal and workshop style sessions focusing on the practical implications of GDPR and what it means for individuals who are processing personal data on a daily basis or less frequently.

We can deliver on-site or remote training and focus on translating the legislation into understandable language with practical anecdotes and case studies. The content and duration of the training can be customised to meet the needs of different roles within your organisation.

POLICY & PROCEDURE

DEMONSTRATE COMPLIANCE

Creation of all key data protection and GDPR compliance policies and procedures to include Privacy Statement, Data Processor Agreement, Data Retention and Data Destruction Policy, Breach Notification Policy, and Subject Access Request Policy. There are typically 10 to 15 key policies and procedures that organisations develop in order to demonstrate compliance.

COMPLIANCE IMPLEMENTATION

CONTINUOUS SUPPORT

Data Processing Log Development and Management, Breach Notification Log Development and Management, Training and Awareness Management, Policy and Procedure roll-out. The level of support you require will depend on how resourced you are internally to manage your overall implementation.