Data Protection Services

Data Protection audit and review

We have extensive experience in assisting clients with reviewing their data processing activities in relation to employee, customer and suppliers’ personal data, identifying non-compliant processing activities and advising on remediation and rectification. We regularly run facilitated workshops to assist clients in identifying the information they hold and how it is used, as well as data flow mapping. We can advise on the biggest data protection risks to your business, and how to address them.

GDPR readiness assessments

We regularly advise clients on how to prepare for the General Data Protection Regulation (GDPR), including gap analysis, staff training and board-level awareness raising

Outsourced Data Protection Officer (DPO) services

The GDPR requires certain types of organisations to appoint a DPO, even where it is not mandatory to do so, voluntary appointment is recommended. We are able to provide outsourced DPO services as a flexible, cost-effective alternative to hiring a full-time member of staff.

Drafting and reviewing data protection policies and documentation data processing contracts

We have extensive experience drafting and reviewing data protection policies and related policies such as electronic communications and bring your own device (BYOD) policies. We frequently assist clients with data protection documentation such as GDPR compliant privacy notices and processing registers. We regularly advise on GDPR compliant data controller to data processor contracts, and international data transfer solutions.

Data breach advice

Should you suffer a data breach, from a cyber-attack to a lost laptop or rogue employee, we can advise on how to report to the Information Commissioner’s Office (ICO), and to affected individuals and liaise with the ICO on your behalf.

Multinational data protection compliance project management

We have extensive experience managing global data protection projects for international businesses, and have a tried and tested network of foreign data protection lawyers.