Discover our range of privacy and data security solutions

Conducting thorough audits to assess an organisation’s adherence to data protection laws and regulations. This service includes a comprehensive review of policies, procedures, data handling practices, and overall compliance status, with recommendations for improvement and risk mitigation.

Ensuring that websites are compliant with cookie laws by drafting and reviewing cookie policies.

Assisting organisations in managing and responding to DSARs in accordance with data protection regulations.

Providing guidance on direct marketing activities, including email marketing, SMS marketing, and telemarketing, to ensure compliance with PECR.
Reviewing marketing campaigns and materials for compliance with PECR regulations.

Conducting PIAs to assess and mitigate the potential risks and impacts of data processing activities on individuals’ privacy.

Drafting customised privacy policies tailored to the specific needs of a business and reviewing existing privacy policies for compliance.

It’s important to note that the Privacy Shield is no longer a valid method for transferring personal data to the USA. This has been replaced with standard contractual clauses (SCC).

Drafting and reviewing DPAs to ensure that third-party service providers and data processors comply with data protection regulations.

Providing expert legal counsel on the roles and responsibilities of data controllers and processors, including guidance on the establishment of legal frameworks, contractual obligations, and compliance with relevant data protection laws.

Assisting organisations in understanding and navigating the Information Commissioner’s Office (ICO) registration or notification process, ensuring compliance with regulatory requirements and providing guidance on the proper handling of data protection matters.

Providing training sessions and resources to educate organisations and their employees on GDPR and other data protection laws.

Assisting organizations in creating, maintaining, and updating comprehensive Records of Processing Activity (ROPA) as required by data protection regulations. This includes documenting all data processing activities, ensuring transparency, and facilitating regulatory compliance.

Offering guidance on how to respond to data breaches, including notification procedures and coordination with relevant authorities.

Advising on lawful mechanisms for international data transfers, such as Standard Contractual Clauses (SCCs) and Binding Corporate Rules (BCRs).